Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Social Tracker Clean

v1.0.0

Track competitor social content across LinkedIn, X, and Instagram. Analyzes posting frequency, top-performing hooks, content pillars, and engagement patterns...

0· 105·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for drivenautoplex1/social-tracker.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Social Tracker Clean" (drivenautoplex1/social-tracker) from ClawHub.
Skill page: https://clawhub.ai/drivenautoplex1/social-tracker
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install social-tracker

ClawHub CLI

Package manager switcher

npx clawhub@latest install social-tracker
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (tracking social posts across LinkedIn, X, Instagram) matches the SKILL.md goals. However the skill lists capabilities (multi-platform scraping/monitoring, Slack/Telegram alerts, paid tiers) but does not declare any credentials, API usage, or endpoints required to perform those actions — an incomplete mapping between claimed capabilities and required resources.
!
Instruction Scope
SKILL.md tells the agent to 'pull recent posts' and use 'web search' and internal NLP scorers/classifiers, but provides no concrete method (platform APIs vs. scraping), no constraints about rate-limits or platform terms, and no explicit handling of external delivery (Slack/Telegram alerts). The prose is open-ended and grants broad discretion to gather public content, which could lead to unintended scraping behavior or transmission of collected data to external services.
Install Mechanism
Instruction-only skill with no install spec or code files — lowest install risk. Nothing is written to disk by a provided installer because none exists.
!
Credentials
requires.env and primary credential are empty, yet the SKILL.md promises Slack/Telegram alerts and paid tiers; there is a mismatch between advertised integrations (which normally require tokens/API keys and payment endpoints) and the skill's declared environment/credentials. This is an unexplained inconsistency.
Persistence & Privilege
Defaults (always: false, model invocation enabled) are used. The skill does not request persistent/system-wide privileges or forced inclusion, so no additional privilege concerns from the manifest itself.
What to consider before installing
Before installing, ask the publisher for clarifications and insist on specifics: (1) How does the skill fetch social posts — which platform APIs or scraping methods? If scraping, will it respect platform terms of service and rate limits? (2) Where do paid subscriptions and reports live, who processes payments, and what data is retained? (3) How are Slack/Telegram alerts delivered — which tokens/endpoints are required and where are they stored? (4) Request a homepage or source repo and, if possible, the actual code for the 'content resonance scorer' and 'NLP classifier' so you can review data handling. If the author cannot provide concrete implementation details (API endpoints, required env vars, data retention policy), avoid installing or granting the skill network access; prefer skills that explicitly declare required credentials and show a trustworthy codebase or official integration.

Like a lobster shell, security has layers — review code before you run it.

latestvk9758ygp79e33m47t4y3vr0jqd83rv97
105downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

Social Tracker

Monitor any competitor or creator's social content strategy and extract what's actually working.

What It Does

Given one or more competitor handles/URLs, Social Tracker will:

  1. Pull recent posts — last 30 days of content across specified platforms
  2. Classify content pillars — what topics they post about and in what ratio
  3. Score hooks — identify their highest-engagement openers and extract the pattern
  4. Cadence analysis — posting frequency by day/week, best times
  5. Gap analysis — topics they're NOT covering that their audience is asking about
  6. Hook templates — 5 swipe-ready hook structures based on their top posts

Inputs

{
  "competitors": ["@handle1", "@handle2"],
  "platforms": ["linkedin", "x", "instagram"],
  "niche": "mortgage|real_estate|crypto|any",
  "analysis_depth": "quick|standard|deep"
}

Outputs

{
  "posting_cadence": {
    "posts_per_week": 4.2,
    "best_days": ["Tuesday", "Thursday"],
    "best_times": ["8am", "12pm"]
  },
  "content_pillars": {
    "education": 0.40,
    "social_proof": 0.25,
    "market_updates": 0.20,
    "personal_story": 0.15
  },
  "top_hooks": [
    {
      "hook": "Most [role] don't know that...",
      "avg_engagement": "2.3x average",
      "pattern": "knowledge_gap"
    }
  ],
  "gap_opportunities": ["topic1", "topic2"],
  "swipe_templates": [
    "Most [ICP] [pain point]. Here's what actually works:",
    "I [did X] for [time]. Here's what I learned:"
  ],
  "summary": "2-3 sentence competitive intel summary"
}

Tiers

Free — 1 competitor, X only, quick analysis (last 10 posts) Standard ($9/mo) — 3 competitors, all platforms, standard depth (last 30 posts), weekly report Pro ($29/mo) — 10 competitors, all platforms, deep analysis, daily monitoring, Slack/Telegram alerts on viral posts

Tools Used

  • Web search for public social posts
  • Content resonance scorer for hook analysis
  • NLP classifier for pillar categorization

Use Cases

  • Know what content is winning in your niche before you post
  • Steal hook structures from accounts 10x your size
  • Find the gap topics your competitors are missing
  • Build a content calendar based on what actually gets engagement

Example Output

Competitor: @mortgagejake_loanpro (LinkedIn)
Posts 5x/week. Tuesday + Thursday 8am best. Top pillar: buyer education (42%). Highest-engagement hook pattern: "The reason [common belief] is wrong:" — 3.1x avg engagement.
Gap opportunity: No content on credit repair for leads — wide open.
Top swipe template: "Most buyers think [X]. Here's what lenders actually see:"

Comments

Loading comments...