Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Rss To Social

Automatically monitor RSS feeds and post to social media. Schedule content, generate posts with AI, and publish to Twitter/LinkedIn.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 188 · 1 current installs · 1 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description: monitor RSS and post to Twitter/LinkedIn. The code does RSS fetching, post generation, deduplication, and local history storage — which matches the core purpose. However the documentation claims direct posting to Twitter/LinkedIn, Buffer/Hootsuite integrations, Telegram approval, and OpenClaw publishing; the shipped script does not implement network posting or integrations (send_to_openclaw only prints). This is a capability mismatch (features advertised but not implemented).
!
Instruction Scope
SKILL.md declares required env vars RSS_FEED_URLS and SOCIAL_PLATFORMS and several optional vars. The Python script reads those, but it also silently reads RSS_TO_SOCIAL_DATA_DIR (not declared in SKILL.md) to determine where it writes posted.json. The SKILL.md also lists curl as a required binary but the script never calls it. The doc suggests direct posting and approval workflows (Telegram, Buffer/Hootsuite), but the runtime code does not call external posting APIs or Telegram. These inconsistencies expand the agent's discretion and create ambiguity about what data will be read/written/transmitted.
Install Mechanism
Instruction-only install (no install spec). There is a small requirements.txt (feedparser) which is appropriate for RSS parsing. No downloads from arbitrary URLs and no installers that write code to unexpected system locations.
Credentials
Declared required env vars (RSS_FEED_URLS, SOCIAL_PLATFORMS) are appropriate. Optional env vars for Twitter/LinkedIn API keys are listed in SKILL.md but are not used by the included script — this is inconsistent but not necessarily dangerous. The script uses an undeclared RSS_TO_SOCIAL_DATA_DIR env var for data storage, which should be declared so users know where posted.json will be written. No primary credential is requested.
Persistence & Privilege
always:false and agent invocation defaults are normal. The skill writes a local posted.json (by default in .rss-to-social) — a modest, expected persistence. It does not request system-wide configuration changes or modify other skills. Running it as a cron/systemd job is suggested but not enforced by the skill.
What to consider before installing
This skill is not obviously malicious, but it contains inconsistencies you should resolve before relying on it: (1) The SKILL.md advertises direct posting (Twitter/LinkedIn), integrations, and approval workflows, but scripts/rss_monitor.py only fetches feeds, generates posts, prints them, and writes a local posted.json — it does not perform any API posting. If you expect automatic posting, confirm the code that performs posting (and where API keys would be consumed). (2) The script reads an undeclared RSS_TO_SOCIAL_DATA_DIR env var to decide where it stores history; verify or set this to a safe directory and review posted.json for sensitive data. (3) SKILL.md lists curl as a required binary, but the script doesn't use it — likely harmless but sloppy. Suggested steps before installing: run the script in test mode (python3 scripts/rss_monitor.py test) with safe feeds, inspect output and the .rss-to-social directory, and if you plan to enable real posting, review or implement the posting code to ensure API tokens are used correctly and stored securely (avoid exporting long-lived tokens in plain shell for production). If you don't want automatic posting, the current code is safer because it only prepares posts locally. If you need the advertised integrations, request or review the implementation from the publisher first.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.2
Download zip
automationvk97d9w3tcwagxh0hxbmrs5y0r182ewg1contentvk97d9w3tcwagxh0hxbmrs5y0r182ewg1latestvk97dmrbrdpwqwy8xph03h5zd7x830h13linkedinvk97d9w3tcwagxh0hxbmrs5y0r182ewg1rssvk97d9w3tcwagxh0hxbmrs5y0r182ewg1schedulingvk97d9w3tcwagxh0hxbmrs5y0r182ewg1social-mediavk97d9w3tcwagxh0hxbmrs5y0r182ewg1twittervk97d9w3tcwagxh0hxbmrs5y0r182ewg1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

📰 Clawdis
Binspython3, curl
EnvRSS_FEED_URLS, SOCIAL_PLATFORMS

SKILL.md

RSS to Social Media Auto-Poster 📰

Stop manually sharing content. This skill monitors your RSS feeds 24/7 and auto-posts engaging content to Twitter, LinkedIn, or both.

Time saved: 5-10 hours/week → 30 minutes/week

What It Does

  • 📰 RSS Monitoring: Track unlimited RSS feeds for new content
  • 🤖 AI Content Generation: Create platform-optimized posts (Twitter threads, LinkedIn articles)
  • Scheduled Publishing: Post at optimal times (configurable: every 2-24 hours)
  • 🔄 Multi-Platform: Twitter, LinkedIn, or both simultaneously
  • 📊 Smart Deduplication: Never post the same content twice (30-day memory)
  • 🔗 Auto Linking: Include original article links + UTM tracking
  • 🎯 Engagement Optimization: AI-generated hooks, hashtags, and CTAs

Quick Start (60 seconds)

# 1. Install
clawhub install rss-to-social

# 2. Configure (add to your env)
export RSS_FEED_URLS="https://techcrunch.com/feed/,https://news.ycombinator.com/rss"
export SOCIAL_PLATFORMS="twitter"
export POST_INTERVAL_HOURS="4"

# 3. Run
# Check RSS and post new content

That's it! The skill will monitor your feeds and post automatically.

Installation

clawhub install rss-to-social

Configuration

Required Environment Variables

# RSS feeds to monitor (comma-separated)
export RSS_FEED_URLS="https://techcrunch.com/feed/,https://news.ycombinator.com/rss"

# Target platforms: twitter, linkedin, or all
export SOCIAL_PLATFORMS="twitter"

# Hours between posts (default: 4)
export POST_INTERVAL_HOURS="4"

Optional Environment Variables

# AI model for content generation
export AI_MODEL="default"

# Include hashtags (true/false)
export INCLUDE_HASHTAGS="true"

# Twitter-specific (if direct posting enabled)
export TWITTER_API_KEY="your_key"
export TWITTER_API_SECRET="your_secret"
export TWITTER_ACCESS_TOKEN="your_token"
export TWITTER_ACCESS_TOKEN_SECRET="your_token_secret"

# LinkedIn-specific (if direct posting enabled)
export LINKEDIN_ACCESS_TOKEN="your_token"

Usage

One-Time Post

Check RSS feeds and post latest content to social media

Start Continuous Monitoring

Start RSS monitoring and auto-posting every 4 hours

Check Status

Show RSS monitoring status and recent posts

Stop Monitoring

Stop RSS auto-posting

Platform-Specific

Post to LinkedIn only from RSS feeds

Output Examples

Twitter Post

🚀 New: OpenClaw Releases Major Update

Key features:
• New skill marketplace
• Improved browser automation  
• 50% performance boost

Read more: https://techcrunch.com/article

#OpenClaw #AI #Automation

LinkedIn Post

Exciting developments in AI automation!

OpenClaw just announced a major update with three game-changing features:

1️⃣ New skill marketplace with 100+ integrations
2️⃣ Improved browser automation for complex workflows
3️⃣ 50% performance improvement across all operations

This is a significant step forward for personal AI assistants.

What features are you most excited about?

Read the full announcement: https://techcrunch.com/article

#ArtificialIntelligence #Automation #Productivity #Tech

Scheduling Options

Using OpenClaw Scheduler

Every 4 hours, check RSS and post new content

Using Cron

# Add to crontab (every 4 hours)
0 */4 * * * cd /path/to/workspace && openclaw run "Check RSS and post"

Using Systemd Timer

# /etc/systemd/system/rss-to-social.timer
[Unit]
Description=RSS to Social Auto-Poster

[Timer]
OnBootSec=5min
OnUnitActiveSec=4h
Unit=rss-to-social.service

[Install]
WantedBy=timers.target

Features

Smart Content Generation

  • Hook Optimization: AI generates attention-grabbing openings
  • Platform Formatting: Adapts length and style per platform
  • Hashtag Suggestions: Relevant tags based on content
  • Link Shortening: Optional URL shortening for cleaner posts

Deduplication

  • Tracks posted URLs in .rss-to-social/posted.json
  • Never posts the same content twice
  • Maintains 30-day history by default

Multi-Feed Support

  • Monitor unlimited RSS feeds
  • Priority ordering (first feed = highest priority)
  • Category-based filtering

Integration

Works With

  • ✅ social-media-automator (this skill can trigger it)
  • ✅ Buffer/Hootsuite (via API)
  • ✅ Twitter API (direct posting)
  • ✅ LinkedIn API (direct posting)
  • ✅ Telegram/WhatsApp (for approval workflow)

Approval Workflow (Optional)

For sensitive accounts, enable approval before posting:

When new RSS content found, send to Telegram for approval before posting

Troubleshooting

No Posts Generated

  • Check RSS_FEED_URLS format (comma-separated, valid URLs)
  • Verify feeds have new content
  • Check AI model availability

Posting Failures

  • Verify API credentials
  • Check rate limits
  • Review platform-specific requirements

Duplicate Posts

  • Clear .rss-to-social/posted.json if needed
  • Adjust deduplication window

Use Cases

Tech News Aggregator

Monitor tech blogs, auto-share to Twitter for thought leadership.

Industry Updates

Track industry RSS feeds, share insights on LinkedIn.

Content Curation

Build a curated news account for your niche.

Personal Branding

Automate your social presence while maintaining quality.

Monetization

This skill powers LobsterLabs content automation services:

  • Setup + Configuration: $299 one-time
  • Monthly Management: $499/month (includes monitoring, optimization, reporting)
  • Custom Integrations: $150/hour

Contact: PayPal 492227637@qq.com

Changelog

1.0.0 (2026-03-07)

  • Initial release
  • RSS feed monitoring
  • AI content generation
  • Twitter/LinkedIn support
  • Deduplication system
  • Scheduling integration

💖 支持作者

如果你觉得这个技能有用,请考虑打赏支持:

你的支持是我持续改进的动力!

微信支付收款码 支付宝收款码

Files

3 total
Select a file
Select a file to preview.

Comments

Loading comments…