Wahlu — Social media automation, scheduling, publishing, and API for Instagram, TikTok, LinkedIn, Facebook, YouTube

• Verdict: Pass
• Analyzed: May 12, 2026, 4:18 AM
• Findings: 0
• Version: 1.0.3
• Hash: cb8c1a5aff4300cd498bac1b6e2a58361b1ba81d7dd14fa1cbd9bc328c2e1863
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: wahlu Version: 1.0.3 The skill bundle provides instructions for an AI agent to interact with the Wahlu social media management CLI. All commands and instructions in `SKILL.md` are directly related to the stated purpose of social media automation (creating posts, scheduling, uploading media, etc.). The skill requires an API key, which is standard for third-party service integration. Notably, the 'Rules' section explicitly instructs the agent to 'Always confirm with the user before publishing or scheduling,' which is a positive security measure. There is no evidence of data exfiltration beyond the service's intended use, malicious execution, persistence mechanisms, or prompt injection attempts against the agent. The installation method via `npx @wahlu/cli` is standard for Node.js CLIs.