Social Media Content Generator
v1.0.0Generate social media posts for LevelUpLove and PayLessTax brands
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description match the included code and templates: index.py generates images for the two brands and templates exist for carousel/infographic/oneliner. Minor mismatches: SKILL.md mentions OpenCV but the code uses Pillow only, and SKILL.md lists 'API trigger' and 'scheduled content calendar' though the shipped code only provides a CLI. These are implementation/documentation inconsistencies but not security risks.
Instruction Scope
The SKILL.md instructions and inputs describe image generation and template variables only. There are no instructions that read unrelated files, access environment variables, or send data externally. The one scope discrepancy is that templates include placeholder tokens (e.g., {{HEADLINE}}) but index.py simply loads JSON and does not perform placeholder substitution — this is a functional bug, not malicious behavior.
Install Mechanism
No install spec is provided (instruction-only + bundled code). There is no download-from-URL or extract step, and no binaries are created outside the package; installation risk is low. The declared dependencies (Pillow, numpy) are reasonable for image work, although numpy is unused in the provided code.
Credentials
The skill declares no required environment variables, no credential access, and no privileged config paths. The code performs only local file I/O to an output directory and does not access secrets or network endpoints.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system-wide configuration. It runs as a normal CLI module and writes generated images to a local output directory (default ./output).
Assessment
This package appears to be what it says: a local image generator using Pillow and simple templates. Before installing or running it: 1) note the minor doc/code mismatches — SKILL.md mentions OpenCV/API triggers and template placeholders, but index.py only uses Pillow, offers a CLI, and does not perform placeholder substitution; you may need to preprocess templates or modify index.py to replace placeholders. 2) There are no network calls or credential requests, so it doesn't exfiltrate secrets, but it will write files to the output path you supply (default ./output) — run it in a sandbox or controlled folder first. 3) Install only trusted versions of dependencies (Pillow/numpy) from your package manager. 4) If you expect scheduled or API-triggered behavior, implement or review that code before enabling automated invocation. Overall this skill is low-risk but has small functional gaps to fix before production use.Like a lobster shell, security has layers — review code before you run it.
latest
Social Media Content Generator Skill
Overview
Automated social media content generation for branded campaigns using OpenCV/Pillow.
Input Variables
| Variable | Description | Example |
|---|---|---|
| HEADLINE | Main headline text | 2026 Tax Deadlines Guide |
| SUBHEADLINE | Supporting subheadline | Don't miss SARS deadlines |
| PANEL_1_TEXT | Carousel panel 1 content | Provisional tax due... |
| CTA_TEXT | Call-to-action button text | Download free guide |
| CTA_URL | URL for CTA | https://paylesstax.co.za |
| PANEL_2_STAT | Statistics for panel 2 | 10% penalty |
Content Types
- carousel: 4-panel Instagram carousel
- infographic: Single detailed infographic
- image: Single image with text overlay
- oneliner: Quick punchy post
Brand Specifications
LevelUpLove
- Colors: Warm pinks (#FF6B9D), soft purples (#C084FC)
- Vibe: Elegant, romantic, relationship advice
PayLessTax
- Colors: Corporate blue (#2563EB), emerald green (#10B981)
- Vibe: Professional, trustworthy, tax compliance
Triggers
- Scheduled content calendar
- Manual CLI execution
- API trigger
Dependencies
- Pillow (PIL): Image generation
- numpy: Image operations
Files
- index.py - Main generation logic
- templates/ - JSON templates for each type
Comments
Loading comments...
