Security audit
Facebook: post & schedule Page posts (1Social)
Security checks for vulnerabilities and agentic risk
Overview
The package provides a disclosed Facebook publishing integration with clear approval steps for public posts and file uploads.
Connect only accounts you intend the agent to manage, and review the destination, content and schedule before approving publication. Uploaded files become publicly accessible by link even if you later decline the post. Review 1Social’s [privacy policy](https://1social.dev/legal/privacy) for token storage and content retention. SkillSpector was not applicable; the bundled skill was inspected directly.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.