SocialRails

Manage social media by scheduling posts, viewing analytics, generating AI captions, and listing connected accounts via the SocialRails API.

Security Scan

The skill's code and runtime instructions are consistent with its stated purpose (talking to the SocialRails API using an API key stored in OpenClaw config); nothing in the files indicates unrelated access or exfiltration, but the package origin is unknown so verify before trusting credentials.

Purpose & Capability

The name/description (manage social media via SocialRails) matches the code and skill.json: all commands call the SocialRails API and require an API key. The supported platforms and operations are coherent with the claimed functionality.

Instruction Scope

SKILL.md instructs storing an apiKey in ~/.openclaw/openclaw.json and using openclaw config commands. The runtime code only reads that config file and calls the SocialRails API; it does not read other system files, environment secrets, or send data to unrelated endpoints.

Install Mechanism

There is no install spec (instruction-only plus a small code bundle). No downloads or archive extraction are used. The package is a small Node module with no dependencies.

Credentials

The skill requires an API key (declared in skill.json and used by the code) stored in the OpenClaw config file, not environment variables. Registry metadata showed no required env vars which is a minor metadata mismatch but not harmful; the API key is the only secret used and is proportional to the functionality.

Persistence & Privilege

The skill is not marked always:true and does not modify other skills or system-wide settings. It only reads its own config file under ~/.openclaw and performs network requests to the configured baseUrl.

Assessment

This skill appears to do what it says: it will read your SocialRails API key from ~/.openclaw/openclaw.json and call https://socialrails.com/api/v1 (or a configured baseUrl). Before installing: 1) Verify you trust the SocialRails service and the skill source (the registry metadata shows an unknown source). 2) Create an API key limited to the minimal scopes you need (read / write / ai) rather than a full-access key. 3) Do not reuse credentials you use elsewhere. 4) Inspect the code (index.js) yourself if possible — it only reads the OpenClaw config and calls the API — and confirm the domain in the config matches the official SocialRails endpoint. 5) Note the small metadata mismatch: required secrets are stored in OpenClaw config (skill.json) rather than as environment variables listed in the registry; this is expected but worth confirming during setup.

Manage your social media from chat. Schedule posts, view analytics, generate AI content, and list connected accounts using the SocialRails API.

Setup

1. Get an API key from SocialRails Dashboard (requires Creator plan or above)
2. Install the skill:

   openclaw install socialrails
   

3. Configure your API key:

   openclaw config socialrails apiKey sr_live_your_key_here
   

Commands

Command	Description	Required Parameters
schedule-post	Schedule a social media post	content, platform
show-analytics	View posting analytics	—
generate-caption	Generate AI-powered content	prompt
list-posts	List your scheduled or published posts	—
list-accounts	List your connected social media accounts	—

Supported Platforms

Twitter, LinkedIn, Facebook, Instagram, TikTok, Bluesky, Pinterest, Threads, YouTube

Examples

> Schedule a tweet about our product launch for next Monday at 9am
> Show me analytics for the last 30 days
> Generate an Instagram caption for a photo of our new office
> List my scheduled posts
> What accounts do I have connected?

Configuration

Configuration is stored in ~/.openclaw/openclaw.json:

{
  "skills": {
    "socialrails": {
      "apiKey": "sr_live_your_key_here",
      "baseUrl": "https://socialrails.com/api/v1"
    }
  }
}

API Key Scopes

Your API key needs the right scopes for each command:

• read — list-posts, show-analytics, list-accounts
• write — schedule-post
• ai — generate-caption

For full access, create a key with all three scopes.

Links

• API Documentation
• OpenClaw Setup Guide
• SocialRails Dashboard