Typefully

Create, schedule, and manage social media posts via Typefully. ALWAYS use this skill when asked to draft, schedule, post, or check tweets, posts, threads, or social media content for Twitter/X, LinkedIn, Threads, Bluesky, or Mastodon.

This skill appears to be a legitimate Typefully CLI wrapper, but there are two red flags you should consider before installing or running it: 1) Metadata mismatch: The registry entry does not declare the TYPEFULLY_API_KEY even though the SKILL.md and included script require it. Ask the publisher (or the skill source) to update the metadata to declare TYPEFULLY_API_KEY as a required credential so automated checks and users can see this up front. 2) Endpoint override: The script honors TYPEFULLY_API_BASE (for tests/self-hosting) but this is not documented in setup. If an attacker can set that environment variable, they could redirect API calls (and capture the API key). Before using, verify the skill's source (prefer an official Typefully-published package or GitHub org), inspect the included scripts yourself, and only set TYPEFULLY_API_KEY in a safe environment. If you must test this skill, run it in an isolated environment (container or dedicated test account) and avoid using your primary Typefully account until you are satisfied with the code and metadata. If you need to proceed: confirm the skill's publisher identity, update metadata to include TYPEFULLY_API_KEY, and ensure TYPEFULLY_API_BASE is not set (or is set only to a trusted value). If you cannot confirm the source, treat it with caution.

Type: OpenClaw Skill Name: typefully-social-media Version: 0.1.0 The skill bundle is classified as **benign**. The `SKILL.md` file is exceptionally well-crafted to prevent prompt injection and misuse by the AI agent. It explicitly forbids the agent from searching for API keys in sensitive locations (e.g., macOS Keychain, `.env` files, system folders), constructing complex shell commands to find credentials, or writing notes to local files instead of the designated `--scratchpad` API option. It also includes strong automation guidelines to prevent spamming or unauthorized actions. The `scripts/typefully.js` script, which is the core logic, uses only built-in Node.js modules and interacts solely with the Typefully API (`api.typefully.com`). It handles API keys and configuration in a secure manner, prioritizing environment variables and offering to integrate local configuration files with `.gitignore` to prevent accidental exposure. Input arguments are parsed and validated, and there are no apparent shell injection vulnerabilities. The `sanitizeFilename` function is a good security practice. A minor functional bug was identified in `cmdMediaUpload` where the `Content-Type` header is explicitly *not* set during S3 uploads, which could lead to incorrect media handling or upload failures, but this is a functional flaw, not indicative of malicious intent or a security vulnerability. There is no evidence of data exfiltration, persistence mechanisms, or other malicious activities.