Social Media Manager
ReviewAudited by ClawScan on May 10, 2026.
Overview
The skill is coherent for social media automation, but it gives broad Postiz-powered posting and scheduling authority across connected social accounts without a clearly declared credential contract or strict approval boundaries.
Install only if you are comfortable giving the agent access to a Postiz API key for your connected social accounts. Use draft or SELF_ONLY mode by default, review every caption and image, and confirm the exact platforms and schedule before allowing any post creation.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A mistaken or unwanted AI-generated post could be scheduled or prepared across multiple brand or personal social accounts.
The skill instructs the agent to use an external publishing API to create scheduled posts and cross-post them broadly, which is high-impact account mutation if not tightly user-approved.
**Scheduling & Publishing**: Upload and schedule via Postiz API. ... Cross-post the same content across multiple platforms simultaneously.
Require explicit user confirmation for the exact content, platforms, integration IDs, posting time, and draft-versus-publish mode before making any Postiz /posts API call.
Users may not realize that using the skill requires handing the agent account-level posting authority through Postiz.
The metadata does not declare a credential requirement, but the instructions require a Postiz API key with authority over connected publishing integrations.
Requirements: Required env vars: none; Primary credential: none. SKILL.md: **Auth Header**: `Authorization: <API_KEY>`
Declare the Postiz API key as a required credential, document its needed scope, and advise users to use the least-privileged key available and revoke it when no longer needed.
One bad prompt, image, caption, or targeting decision could affect several public channels at once.
A single generated post or scheduling mistake can propagate across every connected platform rather than being contained to one channel.
Any platform you connect in Postiz can be targeted ... Cross-post the same content across multiple platforms simultaneously.
Default to one selected platform or SELF_ONLY draft mode, and require separate user approval before expanding to multiple integrations.