Social media autopilot

SocialEcho social media management API skill for querying team, accounts, articles, reports, upload URL, Reddit communities, Pinterest boards, and publishing...

The package appears to do what it says, but consider these practical cautions before installing or running it: (1) Protect your team API key — passing secrets on the command line can expose them via process listings on multi-user systems; prefer secure input methods or a short-lived key. (2) Inspect any publish payload JSON you pass ( --payload ) to avoid including private URLs or sensitive data. (3) The --base-url option can be changed at runtime; only point it at servers you trust. (4) Because the scripts will send requests to the configured base URL, verify the endpoint (default https://api.socialecho.net) and review network egress policies if running in a sensitive environment. (5) If you need higher assurance, run the bundle in an isolated sandbox or review the remaining truncated files before using in production.

Type: OpenClaw Skill Name: socialecho-social-media-management-agent Version: 1.3.0 The skill bundle contains a set of Node.js CLI tools designed to interact with the SocialEcho social media management API. The code uses native Node.js modules (http, https, fs) and has zero external dependencies, which significantly reduces the supply chain attack surface. All scripts (e.g., client.js, publish-article.js, account.js) follow a consistent and transparent pattern of parsing command-line arguments and making authenticated requests to the official API endpoint (api.socialecho.net). There is no evidence of data exfiltration, malicious execution, or prompt injection within the SKILL.md or the source code.