Zernio API
v1.0.3Official Zernio API reference for scheduling posts across 14 social media platforms. Covers authentication, endpoints, webhooks, and platform-specific featur...
⭐ 2· 248·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Zernio API reference for scheduling posts) matches the bundled files: endpoint docs, OAuth/connect guides, webhook verification, media/upload flows and platform-specific parameters. The files and examples all revolve around calling https://zernio.com and related endpoints, which is proportionate to the stated purpose.
Instruction Scope
SKILL.md and the rule files only instruct how to call Zernio endpoints, perform OAuth flows, verify webhooks, and handle uploads/analytics. There are no instructions to read local files, access unrelated environment variables, or exfiltrate system data. Webhook verification and HMAC examples are standard and scoped to webhook handling.
Install Mechanism
No install spec and no code files are included (instruction-only). That is the lowest-risk install mechanism — nothing is downloaded or written to disk by the skill itself.
Credentials
The documentation and examples reference API credentials (e.g., YOUR_API_KEY, process.env.ZERNIO_API_KEY), app passwords, Telegram chat IDs, and other platform tokens — all expected for using a social-media scheduling API. However, the skill metadata declares no required env vars; this is a minor inconsistency (docs show credentials you will need to supply when using the real API, but the skill does not itself declare required environment variables).
Persistence & Privilege
Skill is not always: true and is user-invocable. It does not request persistent agent-wide configuration or privileged system modifications. Autonomous invocation is allowed (platform default) but nothing in the skill increases privilege or persistence.
Assessment
This skill is documentation for the Zernio API and appears internally consistent. Before installing: (1) confirm the Zernio domain and service are legitimate and you trust the provider; (2) be aware examples show using API keys and platform tokens — the skill itself doesn't declare or hold those secrets, so never paste keys into public chats; (3) when you integrate with real accounts, create least-privilege API keys and use webhook secrets securely on your server; (4) if you plan to let the agent call APIs autonomously, ensure you only provide credentials you are comfortable the agent using and review any generated requests. If you want the skill to perform actions, you will need to supply valid Zernio credentials separately (the skill's metadata does not automatically request or store them).Like a lobster shell, security has layers — review code before you run it.
latestvk97ddssfm3mac9qs5e68wz3rn583h2vv
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
