SocialPack Multi-Platform Social Media Generator
v1.0.0Generate platform-specific social posts from a single brief. Twitter threads, LinkedIn, Instagram, Reddit. One input, every platform.
⭐ 0· 1.1k·6 current·6 all-time
byShadow Rose@theshadowrose
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (multi-platform social post generation) matches the SKILL.md usage and the included src/social-pack.js implementation. The code only formats text for platforms and generates simple hashtags. There are no unrelated credentials, binaries, or platform APIs required. Minor note: the LIMITS object in code contains a 'facebook' entry not documented in SKILL.md/README — harmless but slightly inconsistent.
Instruction Scope
SKILL.md gives narrow, concrete usage instructions (require the module and call generate). It does not instruct the agent to read arbitrary files, access environment variables, or transmit data. The README/SKILL.md mention local storage and that data is not transmitted unless configured, but there is no code here that writes files or performs external network calls — this is a documentation/implementation mismatch rather than an active risk.
Install Mechanism
No install spec is provided (instruction-only with an included code file). Nothing is downloaded or extracted at install time and no third-party package installation is mandated by the skill bundle.
Credentials
The skill declares no required environment variables, no credentials, and no config paths. The code does not read process.env or any external auth tokens. Requested environment access is minimal and proportional to the stated purpose.
Persistence & Privilege
always is false and the skill does not request or modify other skills' configuration or system-wide settings. Autonomous invocation is allowed (platform default) but the skill has no privileged access or sensitive scopes, so the risk from autonomous execution is low.
Assessment
This skill appears to be a simple, local text formatter for social posts and is internally coherent. Before installing: (1) Inspect the included src/social-pack.js yourself or run it in an isolated/dev environment to confirm behavior. (2) Do not provide any API keys, credentials, or secrets to this skill (it does not need them). (3) If you expect persistent storage, note the documentation mentions local storage but the provided code does not implement file writes — treat data as in-memory unless you add explicit storage. (4) Because the skill bundle came from an unknown source, prefer running it offline or in a sandbox, and review future updates for added network or credential usage.Like a lobster shell, security has layers — review code before you run it.
automationvk97cme36ghe9qvpd0bhw3a1m6182qczacontentvk97cme36ghe9qvpd0bhw3a1m6182qczalatestvk97cme36ghe9qvpd0bhw3a1m6182qczamarketingvk97cme36ghe9qvpd0bhw3a1m6182qczapostingvk97cme36ghe9qvpd0bhw3a1m6182qczasocial-mediavk97cme36ghe9qvpd0bhw3a1m6182qczasocial-packvk97cme36ghe9qvpd0bhw3a1m6182qcza
License
MIT-0
Free to use, modify, and redistribute. No attribution required.