Wahlu — Social media automation, scheduling, publishing, and API for Instagram, TikTok, LinkedIn, Facebook, YouTube

• Verdict: Pass
• Confidence: High
• Analyzed: Feb 18, 2026, 11:08 AM
• Findings: 0
• Version: 1.0.3

Overview

The skill's requirements and instructions match its stated purpose (social media automation using the Wahlu API); nothing requested looks unrelated or excessive, though installing/running an npm CLI and giving it a live API key carries the normal operational risks of any third‑party CLI.

This skill appears coherent for managing social posts via Wahlu. Before installing: 1) Only provide a WAHLU_API_KEY issued by wahlu.com and follow least-privilege practices (create a key with only necessary scopes). 2) Be aware `npx @wahlu/cli` fetches and runs code from npm — consider auditing the @wahlu/cli package on npm (publisher, version, README, recent changes) or installing a pinned version in a controlled environment. 3) Test publishing flows in a sandbox/brand account before enabling live publishing. 4) Make sure your agent is configured to require explicit user confirmation before any publish/schedule operation (the SKILL.md asks for confirmation but that is not enforced). 5) Monitor activity and revoke the API key if unexpected posts appear.