Larry

Automate TikTok slideshow marketing for any app or product. Researches competitors, generates AI images, adds text overlays, posts via Postiz, tracks analyti...

Install only if you are comfortable giving the skill access to social posting tools and marketing analytics. Use least-privilege API keys, keep generated config and reports out of version control and synced folders, avoid RevenueCat dashboard scraping unless you explicitly approve a narrow session, review every post before publishing or cross-posting, and document how to disable the daily cron and delete stored snapshots.

Type: OpenClaw Skill Name: larry Version: 1.0.0 The OpenClaw AgentSkills bundle 'larry' is designed for TikTok marketing automation, utilizing external APIs for image generation (OpenAI, Stability AI, Replicate), posting/analytics (Postiz), and optional conversion tracking (RevenueCat). The `SKILL.md` provides detailed instructions for the AI agent, guiding it through conversational onboarding, competitor research, content generation, and setting up a daily analytics cron job. All external API calls are to legitimate services, and file system operations are confined to the skill's working directory for configuration, images, and reports. While `JSON.parse` operations in scripts like `add-text-overlay.js`, `competitor-research.js`, and `generate-slides.js` could be theoretical vulnerabilities if an attacker could control the input JSON files, the skill's design implies these files are managed by the agent itself based on user interaction, not directly exposed to arbitrary untrusted input. There is no evidence of intentional harmful behavior, data exfiltration, unauthorized remote control, or persistence mechanisms beyond the stated daily cron for analytics. The instructions for the agent are consistently aligned with the stated marketing purpose, without any prompt injection attempts to subvert the agent's core directives or compromise the system.