Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Multi Platform Publisher Jarvis

v1.0.1

提供多平台内容发布、数据分析与粉丝互动管理,支持热点追踪和排期,助力社交媒体一站式运营。

0· 96·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for bingze00000/multi-platform-publisher-jarvis.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Multi Platform Publisher Jarvis" (bingze00000/multi-platform-publisher-jarvis) from ClawHub.
Skill page: https://clawhub.ai/bingze00000/multi-platform-publisher-jarvis
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install multi-platform-publisher-jarvis

ClawHub CLI

Package manager switcher

npx clawhub@latest install multi-platform-publisher-jarvis
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name and description (multi-platform publishing, analytics, interaction) align with the SKILL.md commands and listed platforms. However, a capability that actually performs publishing or data retrieval normally requires credentials/API access for each platform; the skill declares no required environment variables or config paths and provides no integration details. This omission is plausible if the agent platform supplies connectors, but it is an unexplained gap.
!
Instruction Scope
SKILL.md contains only high-level command templates (e.g., 发布内容 内容=文章.md 平台=微博...), with no concrete instructions on authentication, which APIs/endpoints to call, or how to handle user data. The instructions are open-ended and give the agent broad discretion (e.g., how to find accounts, how to authenticate, whether to use web automation). That vagueness increases risk because it could lead to the agent attempting to access credentials or external endpoints without explicit guidance.
Install Mechanism
No install spec and no code files — instruction-only — so nothing is written to disk and there is no embedded third-party code to review. This is the lowest-risk install mechanism.
Credentials
The skill declares no required environment variables or primary credential. For a social-media publisher this is unusual because per-platform API keys/tokens are typically required. This could be fine if the platform provides built-in integrations, but you should confirm how authentication is expected to occur and avoid supplying broad or long-lived credentials until you understand the flow.
Persistence & Privilege
The skill does not request permanent presence (always: false) and does not claim to modify other skills or system-wide settings. Default autonomous invocation is allowed (platform default) but is not, by itself, a red flag here.
Scan Findings in Context
[no-code-or-installs] expected: The regex scanner found no code files or installs — expected because this is an instruction-only skill. Absence of code reduces some risk but leaves behavior unspecified (agent-level connectors or ad-hoc actions).
What to consider before installing
This skill is a high-level template for multi-platform social media management but omits how it will authenticate or which APIs it will call. Before installing: 1) Ask the publisher how authentication is performed and what permissions/tokens will be required. 2) Never provide full account credentials indiscriminately—prefer scoped API tokens or platform OAuth flows. 3) If the platform supplies connectors, confirm which connector will be used and review its permissions. 4) Test with a throwaway account or limited-scope credentials first. 5) Prefer skills from known authors or with a homepage/source you can audit; if the author is unknown and they require broad account access later, treat that as risky.

Like a lobster shell, security has layers — review code before you run it.

latestvk97e1s4c72vzmtncnep6tzj73h83ttdx
96downloads
0stars
1versions
Updated 4w ago
v1.0.1
MIT-0

Social Media Manager - 社交媒体管理助手

功能描述

一站式社交媒体管理工具,支持多平台内容发布、数据分析、粉丝互动。

使用场景

  • 多平台内容同步发布
  • 社交媒体数据分析
  • 粉丝互动管理
  • 热点追踪
  • 内容排期管理
  • KOL/KOC 数据分析

命令

多平台发布

发布内容 内容=文章.md 平台=微博,公众号,知乎 定时=2026-03-29 09:00

数据分析

获取数据 平台=微博 账号=@xxx 时间范围=7 天

粉丝互动

回复评论 平台=微博 时间范围=1 小时 情感=正面优先

热点追踪

追踪热点 关键词=AI 平台=微博,知乎 时间=24 小时

支持平台

  • 微博
  • 微信公众号
  • 知乎
  • 小红书
  • 抖音
  • B 站
  • 头条号

功能模块

  • 内容发布
  • 数据看板
  • 粉丝管理
  • 热点监控
  • 竞品分析
  • 排期日历

特性

  • 多平台统一管理
  • 自动发布
  • 数据可视化
  • 情感分析
  • 智能推荐

Comments

Loading comments...