Larry

Automate TikTok slideshow marketing for any app or product. Researches competitors, generates AI images, adds text overlays, posts via Postiz, tracks analyti...

Install only if you are comfortable giving the skill access to social-posting and analytics accounts. Use least-privilege API keys, avoid committing tiktok-marketing/config.json or snapshots, prefer environment variables or a secret manager, review any cron job before enabling it, and manually verify Postiz-to-TikTok release-ID mappings before running --connect.

Type: OpenClaw Skill Name: larry Version: 1.0.0 The OpenClaw AgentSkills bundle 'larry' is designed for TikTok marketing automation, utilizing external APIs for image generation (OpenAI, Stability AI, Replicate), posting/analytics (Postiz), and optional conversion tracking (RevenueCat). The `SKILL.md` provides detailed instructions for the AI agent, guiding it through conversational onboarding, competitor research, content generation, and setting up a daily analytics cron job. All external API calls are to legitimate services, and file system operations are confined to the skill's working directory for configuration, images, and reports. While `JSON.parse` operations in scripts like `add-text-overlay.js`, `competitor-research.js`, and `generate-slides.js` could be theoretical vulnerabilities if an attacker could control the input JSON files, the skill's design implies these files are managed by the agent itself based on user interaction, not directly exposed to arbitrary untrusted input. There is no evidence of intentional harmful behavior, data exfiltration, unauthorized remote control, or persistence mechanisms beyond the stated daily cron for analytics. The instructions for the agent are consistently aligned with the stated marketing purpose, without any prompt injection attempts to subvert the agent's core directives or compromise the system.