ClawHub

SocialClaw - Social Claw is a social media scheduling skill for AI agents posting to X, LinkedIn, Instagram, Facebook Pages, TikTok, Discord, Telegram, YouTube, Reddit, WordPress, and Pinterest

v2.0.4

Use when a user wants social media scheduling and publishing for AI agents on X, LinkedIn, Instagram, Facebook Pages, TikTok, Discord, Telegram, YouTube, Red...

⭐ 1· 282·0 current·0 all-time
by@ndesv21
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, base URL (getsocialclaw.com), required env var (SC_API_KEY), and optional npm CLI all align with a hosted social scheduling service client. No unrelated credentials or binaries are requested.
✓
Instruction Scope
SKILL.md restricts actions to validating the workspace API key, using the SocialClaw HTTP API, and optionally running the socialclaw CLI. It does not instruct reading unrelated system files, other environment variables, or exfiltrating data to unexpected endpoints.
✓
Install Mechanism
Install spec is an npm package (socialclaw) producing CLI binaries; this is proportionate for an optional CLI client. No arbitrary download/URL or archive extraction is used.
✓
Credentials
Only SC_API_KEY is required and declared as the primary credential, which matches the documented runtime needs. The instructions explicitly avoid asking for provider app secrets and caution against echoing full API keys.
✓
Persistence & Privilege
always is false and the skill is user-invocable; it does not request system-wide configuration or permission to modify other skills. Allowing autonomous invocation is the platform default and not itself a red flag here.
Assessment
This skill is coherent with its stated purpose. Before installing: only provide a workspace API key (SC_API_KEY) from a SocialClaw workspace you trust; avoid pasting provider app secrets into chat or the agent; if you plan to install the npm CLI, review the npm package source or its maintainer reputation before running npm install -g; confirm the workspace billing/status on the SocialClaw dashboard (plan_required errors are expected if billing is inactive). If you prefer tighter control, only enable the skill for explicit user invocation rather than allowing autonomous agent use.

Like a lobster shell, security has layers — review code before you run it.

latestvk97fk9fcbbqw3qwqkdxbzgvpx583wxh3

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvSC_API_KEY
Primary envSC_API_KEY

Install

Install SocialClaw CLI (npm)
Bins: socialclaw, social
npm i -g socialclaw

Comments