Social Intelligence

Social Intelligence — AI-powered social media research across Twitter, Instagram, and Reddit. 1.5B+ posts indexed. Find experts, generate leads, monitor brands, analyze sentiment, discover influencers, and export data. The complete social intelligence toolkit for AI agents via MCP.

This skill appears to do what it says (run a CLI to query an Xpoz MCP backend), but there are a few red flags to check before installing: 1) Inspect the npm package 'mcporter' (publisher, homepage, source code, recent versions) — npm packages run code on your machine. 2) Verify the xpoz-setup skill: what OAuth scopes it requests and where it stores tokens. 3) Confirm the MCP domain (mcp.xpoz.ai) and the Xpoz service (xpoz.ai) are legitimate and that using them meets platform Terms of Service (Twitter/Instagram/Reddit/TikTok scraping can violate ToS). 4) Resolve the metadata mismatch (registry shows no credentials/network but SKILL.md requires them) — ask the publisher to correct the manifest. If you can't verify the npm package or xpoz-setup behavior, avoid installing or run it in an isolated environment (sandbox/CI) and review the package contents first.

Type: OpenClaw Skill Name: social-intelligence Version: 1.1.1 The skill bundle is designed to interface with the Xpoz social intelligence platform. It declares its dependency on the `mcporter` binary (installed via npm) and requires network access to `mcp.xpoz.ai`, which is the stated backend for the service. All instructions in SKILL.md are clear, directly related to the skill's purpose, and use standard OpenClaw and npm commands. There is no evidence of prompt injection, data exfiltration to undeclared endpoints, malicious execution, persistence mechanisms, or obfuscation within the provided files. The skill appears to be a legitimate client for a third-party service.