Publora Tiktok

Post or schedule video content to TikTok using the Publora API. Use this skill when the user wants to publish or schedule TikTok videos via Publora.

This skill appears to do what it claims (post/schedule TikTok videos via Publora), but there are important gaps you should clarify before installing: - The SKILL.md uses an 'x-publora-key' API key header, yet the skill metadata does not declare any required credentials or a primaryEnv. Confirm how the agent will get the Publora API key (will you paste it in conversation, set an env var, or is there supposed to be a 'publora' core skill that centralizes auth?). - The documentation refers to a separate 'publora core skill' for auth and webhooks but that dependency isn't listed. Ask the publisher where that core skill is and how auth is handled. - There is no source or homepage provided. Prefer skills that publish source or a vendor homepage so you can verify the publisher and check for official documentation or SDKs. - When you provide any API key, ensure it has the minimum scope needed and that you trust the skill/publisher. Observe network activity: this skill will send content and media to api.publora.com and to presigned S3 upload URLs (expected), but do not provide secrets to untrusted or unknown publishers. If the publisher confirms the missing credential declaration and provides a link to the 'publora' core skill or official docs, that would remove the main concerns and increase confidence.

Type: OpenClaw Skill Name: publora-tiktok Version: 2.0.0 The skill bundle provides documentation and code examples for interacting with the Publora API (api.publora.com) to schedule and upload TikTok videos. The instructions and code snippets (JavaScript and Python) follow a standard 3-step API workflow and do not contain any indicators of malicious intent, data exfiltration, or harmful prompt injection.