← Back to Skills Marketplace
yadavabhijeet4

golden-rule

by yadavabhijeet4 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
311
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install golden-rule
Description
Automates the "Golden Hour" Instagram engagement hack. Use this skill when a user wants to set up a bot that watches an Instagram Reel/Post for a specific ke...
README (SKILL.md)

Golden Hour Automator

This skill provides the script and instructions needed to run a comment-to-DM automation on Instagram. It is designed to boost engagement in the critical first hour (the "Golden Hour") after a post goes live.

Prerequisites

The user must have:

  1. An Instagram Professional/Business account linked to a Facebook Page.
  2. A Long-Lived Instagram Graph API Page Access Token (IG_ACCESS_TOKEN).
  3. Their Instagram Business Account ID (IG_ACCOUNT_ID).

Ensure these are set in the environment or .env file before running the script.

Usage

When a user asks to monitor a post for a keyword and send a DM, run the included ig_golden_hour.py script.

uv run {baseDir}/scripts/ig_golden_hour.py \
    --media_id "12345678901234567" \
    --keyword "bot" \
    --dm_text "Here is the link you requested: https://example.com" \
    --duration 60

Parameters:

  • --media_id: The ID of the specific Instagram post/Reel to monitor. (You may need to query the Graph API me/media endpoint to find this for the user's latest post).
  • --keyword: The trigger word the script watches for in the comments (case-insensitive).
  • --dm_text: The exact message to send to the user's DMs.
  • --duration: How many minutes the script should stay alive and monitor the post (default is 60).

What the Script Does:

  1. Polls the comments of the specified media_id every 2 minutes.
  2. If it finds the --keyword, it sends the --dm_text directly to the commenter's inbox using the Meta me/messages endpoint.
  3. It posts a public reply to the comment ("Just sent you a DM with the link! 🚀") to double the post's comment count and boost algorithmic reach.
  4. It sends a success notification back to OpenClaw via the openclaw message CLI.
Usage Guidance
This skill implements the claimed Instagram automation, but it contains several coherence issues you should resolve before using it: 1) The package metadata does not declare required environment variables (IG_ACCESS_TOKEN, IG_ACCOUNT_ID) or the Python dependency 'requests' even though the script needs them — treat missing declarations as a sign you must manually review/prepare the environment. 2) The script calls the local 'openclaw' CLI to send notifications; ensure that CLI is present and you trust it, or remove that call if you don't want outbound notifications. 3) There is a prompt-injection indicator (unicode-control-chars) in SKILL.md — inspect the file for hidden characters or manipulative content. 4) Use a dedicated test Instagram Business account and a token with the minimum scope required, and do not run this against accounts you care about until you’ve tested it. 5) Consider adding an explicit install step (pip install requests) in a controlled virtualenv, verify the script source line-by-line, and confirm compliance with Instagram/META terms (automated engagement can violate platform policies). If you cannot validate these points, do not install or run the skill.
Capability Analysis
Type: OpenClaw Skill Name: golden-rule Version: 1.0.0 The skill implements an Instagram engagement bot using the Meta Graph API and requires sensitive credentials (IG_ACCESS_TOKEN). It is classified as suspicious due to the use of os.system for shell execution in ig_golden_hour.py, which is a high-risk practice (potential shell injection vector), and the inclusion of hardcoded strings ('Mock Trading DM') that do not align with the script's dynamic parameters, suggesting potential copy-paste from other contexts or unintended behavior.
Capability Assessment
Purpose & Capability
The script and SKILL.md implement an Instagram comment->DM automation which aligns with the described 'Golden Hour' engagement hack. However the registry metadata claims no required environment variables or binaries while the script explicitly needs IG_ACCESS_TOKEN and IG_ACCOUNT_ID and the SKILL.md suggests using a .env — this mismatch is unexpected and reduces trust.
Instruction Scope
SKILL.md instructs the agent/operator to run the provided script and set IG_ACCESS_TOKEN and IG_ACCOUNT_ID. It also instructs sending a notification back to OpenClaw via the 'openclaw message' CLI. The instructions do not overreach into unrelated system areas, but they implicitly require a local CLI ('openclaw') and posting to an external service (OpenClaw webchat) which are not declared in the skill metadata.
Install Mechanism
This is instruction-only (no install spec) but includes a Python script that declares a dependency on 'requests' in a top comment. The registry provides no install/dependency information, which is inconsistent: the code needs the requests package but there is no install step declared for ensuring that dependency is present.
Credentials
The script legitimately requires IG_ACCESS_TOKEN and IG_ACCOUNT_ID to use the Graph API, which is proportionate to the stated purpose. However the registry metadata lists no required env vars while the SKILL.md and script both require secrets — this mismatch is a red flag. The script also invokes the 'openclaw' CLI (via os.system) which implies another implicit required tool/credential not declared.
Persistence & Privilege
The skill does not request persistent or elevated platform privileges (always:false) and is user-invocable. It runs as a short-lived script for a duration parameter. The only extra privilege is that it calls an external CLI to notify OpenClaw, which could relay runtime events; this is noted but not by itself a high privilege request.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install golden-rule
  3. After installation, invoke the skill by name or use /golden-rule
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of Golden Hour Automator - Automates Instagram "Golden Hour" engagement by monitoring post comments for a target keyword. - Automatically replies to matching comments and sends a DM to commenters with a customizable message or link. - Runs for a specified time window, polling comments every 2 minutes during the session. - Built for Instagram business accounts using the Graph API access token and account ID. - Includes script and usage instructions for quick setup.
Metadata
Slug golden-rule
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is golden-rule?

Automates the "Golden Hour" Instagram engagement hack. Use this skill when a user wants to set up a bot that watches an Instagram Reel/Post for a specific ke... It is an AI Agent Skill for Claude Code / OpenClaw, with 311 downloads so far.

How do I install golden-rule?

Run "/install golden-rule" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is golden-rule free?

Yes, golden-rule is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does golden-rule support?

golden-rule is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created golden-rule?

It is built and maintained by yadavabhijeet4 (@yadavabhijeet4); the current version is v1.0.0.

💬 Comments