Back to plugin

Security audit

Social Media Manager by SocialBu

Security checks for vulnerabilities and agentic risk

Overview

The package supports SocialBu planning and publishing with clear limits tied to the user's authorized requests.

Authorize only the SocialBu workspace you intend to manage, and specify accounts, content, media, and timing clearly. Selected files will be transferred to SocialBu or its upload storage. Scheduled posts and enabled automations can act later; deletion can be permanent. Complete OAuth in your browser and keep credentials out of chat.

Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (4)

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
75% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · skills/social-media-calendar/SKILL.md (reported line 40)May include surrounding context.

md
2. Call `get_post_options` for those accounts. Check the actual format and media requirements before scheduling each entry. Read `list_posts` for each destination, following pagination, to compare the relevant dates against existing posts. Keep existing posts unless the user authorizes a change.
3. Resolve the final copy, account, actual media, dates/times, and requested state. Do not turn a planning request into a scheduling operation. If these choices are already clear and authorized, proceed without asking for repeated confirmation.
4. Convert each local time to UTC `Y-m-d H:i:s` using the offset on that date. Call `create_post` once per destination with an explicit `post_type: scheduled` and future `scheduled_at`. For saved drafts use `post_type: draft`; for requested team review use `post_type: awaiting_approval`. An existing draft selected for scheduling should use `update_post` with its ID, `post_type: scheduled`, and `scheduled_at`.
5. Supply accessible HTTP(S) media URLs or co

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
75% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · skills/socialbu/SKILL.md (reported line 46)May include surrounding context.

md
- Use `get_post_options` before creating or materially changing a post when network-specific options may apply.
- Interpret every scheduling timestamp as UTC in `Y-m-d H:i:s` format. Convert from the user's timezone when needed.
- Do not publish, delete, disconnect an account, approve or reject a post, change an automation, or remove listening data unless the user's request authorizes that action.
- If the user already gave clear authorization and the target is unambiguous, proceed without asking them to repeat it.
- Verify the destination account, content, media, scheduled time, and requested post state before a consequential action.
- Return the actual SocialBu result. Never invent a post, account, metric, publish result, or successful mutation.
- Explain actionable API or permission errors without exposing tokens, signed upload URLs after use, or private account data unrelated to the request.

Credential Access

High
Category
Privilege Escalation
Confidence
70% confidence
Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · skills/socialbu/SKILL.md (reported line 15)May include surrounding context.

md
## Connect

Connect the hosted MCP server at `https://socialbu.com/mcp` using Streamable HTTP and OAuth. Complete authorization in the user's browser on SocialBu. Keep passwords and access tokens out of chat and configuration files.

In OpenClaw, open **Settings → MCP**, add `socialbu` with that URL and the Streamable HTTP transport, and set `auth` to `oauth` in the scoped configuration editor. Select **Sign in**, complete authorization, then check the connection. Follow the [OpenClaw MCP connection guide](https://docs.openclaw.ai/tools/mcp) if the installed version uses different controls.

The media workflow uploads agent-held files without a user-facing warning about third-party data transfer.

Medium
Category
Output Handling
Confidence
87% confidence
Finding

The workflow instructs the agent to upload raw file bytes to a signed URL but does not require informing the user that their file will be transferred to SocialBu or its upload-storage provider. The instruction to protect signed URLs addresses credential exposure, not disclosure of the uploaded file's contents.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.