Security audit
Security checks for vulnerabilities and agentic risk
The skill requires approval before posting, but its fallback sign-in method puts a reusable account key in a potentially exposed connection URL.
Prefer browser-based OAuth sign-in and avoid the API-key-in-URL fallback. Connecting grants access to your social accounts, so review the accounts, slides, captions and schedule before approving each batch. Only upload images you intend WoopSocial to receive.
Code or instructions that leak agent conversation context to external services, potentially exposing sensitive user interactions.
#!/usr/bin/env python3
"""Upload one file to a WoopSocial media upload session (standard library only).
WoopSocial uploads work in three steps:
1. The agent calls `media_uploads_create_session` with the projectId and the file size in bytes.
Without declared permissions the skill's intent is opaque and cannot be validated.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
|---|---|
| Claude (claude.ai, Desktop, Cowork) | Add WoopSocial from the [Claude directory](https://claude.ai/directory/woopsocial), click Connect and sign in |
| Cursor | Install from [cursor.directory](https://cursor.directory/plugins/woopsocial-social-media-scheduler) and sign in |
| Claude Code | `claude mcp add --transport http woopsocial "https://api.woopsocial.com/mcp"`, then `/mcp`, select woopsocial, Authenticate |
| Codex | `codex mcp add woopsocial --url https://api.woopsocial.com/mcp`, then `codex mcp login woopsocial` |
| OpenClaw | Install the [WoopSocial skill on ClawHub](https://clawhub.ai/woopsocial/skills/social-media-scheduler), or add the MCP URL to the agent's MCP config |
| Agents without sign-in support | Create an API key at [app.woopsocial.com/api-access](https://app.woopsocial.com/api-access) and use `https://api.woopsocial.com/mcp?api_key=%2A%2A%2A |
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
| Claude (claude.ai, Desktop, Cowork) | Add WoopSocial from the [Claude directory](https://claude.ai/directory/woopsocial), click Connect and sign in |
| Cursor | Install from [cursor.directory](https://cursor.directory/plugins/woopsocial-social-media-scheduler) and sign in |
| Claude Code | `claude mcp add --transport http woopsocial "https://api.woopsocial.com/mcp"`, then `/mcp`, select woopsocial, Authenticate |
| Codex | `codex mcp add woopsocial --url https://api.woopsocial.com/mcp`, then `codex mcp login woopsocial` |
| OpenClaw | Install the [WoopSocial skill on ClawHub](https://clawhub.ai/woopsocial/skills/social-media-scheduler), or add the MCP URL to the agent's MCP config |
| Agents without sign-in support | Create an API key at [app.woopsocial.com/api-access](https://app.woopsocial.com/api-access) and use `https://api.woopsocial.com/mcp?api_key=%2A%2A%2A |
The fallback setup puts an API key in the MCP URL query string, where it can be retained in client configuration, diagnostic output, and proxy or service request logs. HTTPS protects transport but does not prevent these disclosures; a leaked key could enable unauthorized operations within its granted social-account permissions.
| Claude Code | `claude mcp add --transport http woopsocial "https://api.woopsocial.com/mcp"`, then `/mcp`, select woopsocial, Authenticate |
| Codex | `codex mcp add woopsocial --url https://api.woopsocial.com/mcp`, then `codex mcp login woopsocial` |
| OpenClaw | Install the [WoopSocial skill on ClawHub](https://clawhub.ai/woopsocial/skills/social-media-scheduler), or add the MCP URL to the agent's MCP config |
| Agents without sign-in support | Create an API key at [app.woopsocial.com/api-access](https://app.woopsocial.com/api-access) and use `https://api.woopsocial.com/mcp?api_key=%2A%2A%2A |
The API key is a password: never paste it into shared chats or commit it.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
returns a link; the user opens it, approves, and tells you when they're done. Confirm with
`social_accounts_list`. Repeat per platform.
Find IDs yourself with `projects_list` and `social_accounts_list`; never ask the user to paste
IDs.
## 3. Upload the slides
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
except Exception:
# Python builds without system certificates (common on macOS): use curl instead.
try:
subprocess.run(["curl", "-fsSL", "-o", BUNDLED_FONT, FONT_URL], check=True, timeout=60)
except Exception:
return False
if not os.path.exists(BUNDLED_FONT) or os.path.getsize(BUNDLED_FONT) < 100000:
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
def put_with_curl(url, chunk):
"""Fallback for Python builds without system certificates (common on macOS)."""
result = subprocess.run(
["curl", "-fsS", "-X", "PUT", "-H", "Content-Type: application/octet-stream",
"--data-binary", "@-", "-o", os.devnull, "-w", "%{http_code}", url],
input=chunk, capture_output=True, timeout=300)