spool

PassAudited by ClawScan on May 1, 2026.

Overview

This skill matches its stated Threads browser-automation purpose, but it uses your logged-in Threads session and can publish posts or replies, so review actions before posting.

Use this skill only if you are comfortable letting OpenClaw operate a logged-in Threads browser session. Review and approve any post or reply before it is submitted, and only run the optional Xvfb/systemd setup if you need headless browser support.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent can access and act as the logged-in Threads account while following this skill.

Why it was flagged

The skill expects a browser profile that is already logged into Threads, so the agent operates using the user's authenticated Threads session.

Skill content
- `openclaw` browser profile
- Threads 계정 로그인 완료
Recommendation

Use a dedicated browser profile or account if possible, and log out or revoke access when you no longer want the agent to use the session.

What this means

A post or reply made through this skill may become public under the user's Threads account.

Why it was flagged

The skill teaches browser automation for clicking the Threads Post button, and it also instructs the agent to get user confirmation before posting.

Skill content
Step 4: Post 버튼 클릭 ... 포스팅 전 확인 - 사용자에게 내용 확인받고 포스팅
Recommendation

Confirm the exact text and target thread before allowing the agent to click Post or submit a reply.

What this means

Running the setup changes system configuration and starts a background virtual display service.

Why it was flagged

The optional headless setup asks the user to run privileged shell commands and enable a persistent Xvfb service.

Skill content
sudo apt install -y xvfb ... sudo tee /etc/systemd/system/xvfb.service ... sudo systemctl enable --now xvfb
Recommendation

Only run the headless setup on systems where you need browser automation without a GUI and are comfortable with the persistent service.