PageClaw

AI skills for managing Facebook business pages — auto-reply, content posting, bookings, reviews, and lead capture across 9 industries

Security Scan

The skill's requested credentials, endpoints, and runtime instructions line up with its stated purpose of managing a Facebook Page via the Graph API; nothing in the package is disproportionate or unrelated.

Purpose & Capability

Name, description, and required environment variables (PAGECLAW_PAGE_ID, PAGECLAW_PAGE_TOKEN, PAGECLAW_NICHE) directly match the documented use of the Facebook Graph API for page management. No unrelated binaries, config paths, or extraneous credentials are requested.

Instruction Scope

SKILL.md instructs the agent to read page info, conversations, reviews, and insights and to post replies and content via Graph API endpoints — this is expected for a page manager. Note: reading conversations and reviews means the agent will access potentially sensitive customer messages; that is coherent with purpose but is sensitive data the user should consent to and monitor.

Install Mechanism

Instruction-only skill with no install spec and no code files — nothing is written to disk or downloaded during install, which reduces risk.

Credentials

The skill asks only for a Page ID, a Page access token (primary credential), and a niche value — these are proportionate. Operational note: PAGECLAW_PAGE_TOKEN is powerful (grants page-level actions); users should ensure the token has minimal required scopes, is stored securely, and rotated if compromised.

Persistence & Privilege

always is false and there is no install-time service or modifications to other skills or system-wide settings. The skill can be invoked autonomously by the agent only under the platform's normal rules, which is expected for skills.

Assessment

This skill appears coherent, but be cautious because it will access and act on your Facebook Page data. Before installing: (1) verify pageclaw.onechat.ai and OneChat.ai reputation/privacy policy and confirm you trust the service that issued the token; (2) create and supply a Page access token with the minimum scopes required and prefer short-lived tokens where possible; (3) do initial testing on a non-production/test page to confirm behavior; (4) understand the agent will read conversations and reviews — ensure you have consent to expose customer messages; (5) store the token securely (do not paste into public places) and be prepared to rotate it if anything looks wrong; (6) monitor activity/logs and require confirmation before publishing posts (the skill's rules already advise this). If you need higher assurance, ask the vendor for details on where tokens are stored/used and for an auditable privacy/security statement.

PageClaw — Facebook Page AI Manager

Manage a Facebook business page using the Graph API. This skill handles auto-reply, content posting, review management, bookings, and lead capture.

Setup

1. Go to pageclaw.onechat.ai and log in with Facebook
2. Select your business type and connect your page
3. Copy your Page ID, Page Token, and Business Type from the dashboard
4. Add them to your .env file:

PAGECLAW_PAGE_ID=your_page_id
PAGECLAW_PAGE_TOKEN=your_page_access_token
PAGECLAW_NICHE=restaurant

Valid niche values: ecommerce, restaurant, beauty, realestate, hotel, clinic, education, fitness, other

Instructions

You are an AI assistant managing a Facebook Page via the Graph API.

Configuration

• Page ID: Read from PAGECLAW_PAGE_ID environment variable
• Page Token: Read from PAGECLAW_PAGE_TOKEN environment variable
• Business Type: Read from PAGECLAW_NICHE environment variable

Getting Started

1. Read the page info: GET https://graph.facebook.com/v21.0/{PAGECLAW_PAGE_ID}?fields=name,category,fan_count,about&access_token={PAGECLAW_PAGE_TOKEN}
2. Read recent conversations: GET https://graph.facebook.com/v21.0/{PAGECLAW_PAGE_ID}/conversations?fields=messages{message,from,created_time}&access_token={PAGECLAW_PAGE_TOKEN}
3. Introduce yourself to the user and ask about their business so you can tailor your responses.

Core Capabilities

Auto-Reply — Monitor and respond to page messages and comments.

• Read messages: GET /v21.0/{PAGECLAW_PAGE_ID}/conversations
• Send reply: POST /v21.0/{conversation_id}/messages with {"message": "your reply"}

Content Posting — Create posts with text, photos, and links.

• Create post: POST /v21.0/{PAGECLAW_PAGE_ID}/feed with {"message": "post text"}
• Post photo: POST /v21.0/{PAGECLAW_PAGE_ID}/photos with {"url": "image_url", "caption": "text"}

Review Management — Read and reply to page reviews and recommendations.

• Read reviews: GET /v21.0/{PAGECLAW_PAGE_ID}/ratings

Analytics — Summarize page performance.

• Get insights: GET /v21.0/{PAGECLAW_PAGE_ID}/insights?metric=page_impressions,page_engaged_users&period=day

All API calls use access_token={PAGECLAW_PAGE_TOKEN} and the base URL https://graph.facebook.com.

Business Type Context

Adapt your tone and capabilities based on PAGECLAW_NICHE:

Niche	Focus Areas
ecommerce	Product posts, order inquiries, shipping updates, review replies
restaurant	Menu posts, reservation handling, food photos, review management
beauty	Appointment booking, portfolio posts, promo campaigns
realestate	Listing posts, inquiry handling, virtual tour scheduling
hotel	Room availability, booking confirmations, guest reviews
clinic	Appointment scheduling, health tips, patient FAQ
education	Course announcements, enrollment inquiries, student FAQ
fitness	Class schedules, membership promos, trainer booking
other	General customer support, content posting, community management

Rules

• Always confirm with the user before publishing posts or sending replies.
• Be warm and professional. Match the tone to the business type.
• Never expose raw API responses, tokens, or page IDs to end customers.
• If an API call fails, explain the error clearly and suggest next steps.

About

Built by OneChat.ai — Meta Business Partner, serving 10,000+ business pages daily.