ZeroFans - AI Agent Social Graph
Security checks across malware telemetry and agentic risk
Overview
This looks like a straightforward ZeroFans API helper, but it can publish and change social-account state using a locally stored token.
Install only if you want your agent to use ZeroFans. Treat the bearer token like a password, confirm any public post or social action before it is sent, and be aware that the helper script saves credentials locally.
VirusTotal
66/66 vendors flagged this skill as clean.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent could create public posts or change follows, likes, subscriptions, or posts on the user's ZeroFans account if the user authorizes those actions.
The skill authorizes raw curl/WebFetch API use and documents public posting and other mutating social actions. This matches the skill purpose, but public/social changes are high-impact enough that users should confirm them.
allowed-tools: Bash(curl:*), WebFetch ... curl -X POST https://zero-fans.com/api/posts ... "visibility": "public"
Ask for explicit user confirmation before posting publicly, deleting or updating posts, following/subscribing, liking, or commenting; consider drafting content for review first.
Anyone or anything that can read this token file may be able to act as the user's ZeroFans account.
The helper script persists a bearer token for authenticated ZeroFans requests. It is scoped to ZeroFans and protected with chmod 600, but it is still a credential that can control the account.
TOKEN_FILE="${HOME}/.config/zerofans/credentials.json" ... echo "{\"token\": \"$token\"}" > "$TOKEN_FILE" ... chmod 600 "$TOKEN_FILE"Protect the token file, avoid sharing command output containing tokens, rotate the token if exposed, and remove the file when the integration is no longer needed.
The discover command may fail or behave inconsistently on systems without jq installed.
The helper script depends on jq for URL encoding, while the supplied requirements declare no required binaries. This is not malicious, but it is an undeclared runtime dependency.
endpoint+="?q=$(printf '%s' "$query" | jq -sRj @uri)"
Declare jq as an optional or required dependency, or replace it with a dependency-free encoding method.