← Back to Skills Marketplace
880
Downloads
1
Stars
15
Active Installs
5
Versions
Install in OpenClaw
/install social-media-automator
Description
Automatically generate social media posts from articles. Supports Twitter, LinkedIn, Instagram, TikTok, YouTube Shorts, Threads, and Bluesky. Perfect for con...
Usage Guidance
This skill appears to be primarily a text-generation helper, but there are several inconsistencies you should resolve before installing or granting it more access:
- Ask the publisher whether the skill only generates copy (safe) or also posts/schedules to platforms (requires API keys and network access). The SKILL.md hints at npm packages for Threads/Bluesky but the registry lists no install — get clarity on whether npm packages will be installed automatically.
- If you expect posting/scheduling, require explicit documentation of which environment variables (API keys/tokens) are needed, where credentials are stored, and exactly which endpoints the skill will call.
- Verify the source: metadata points to a GitHub repo in _meta.json but the 'Source' and 'Homepage' fields are unknown/none. Inspect the upstream repo and code before installing any npm packages.
- Because SKILL.md references installing npm packages, be cautious about automatic installs; npm packages run arbitrary code on install/use. Prefer a vetted release or review the package contents.
- Do not provide platform credentials (Twitter, Threads, Buffer, Hootsuite, DALL·E/OpenAI keys, etc.) until you confirm the integration method and trust the code.
If the publisher confirms the skill only generates posts locally (no external posting or hidden installs), the incoherences are likely just sloppy metadata (lower risk). If it actually installs npm packages or posts on your behalf, treat it as higher risk until source and credential handling are audited.
Capability Analysis
Type: OpenClaw Skill
Name: social-media-automator
Version: 1.2.0
The skill bundle is a legitimate tool for generating social media content from articles. It utilizes standard dependencies like curl for fetching web content and official-looking NPM packages (@atproto/api, threads-api) for social media integration. The instructions in SKILL.md are well-aligned with the stated purpose, and no evidence of malicious intent, data exfiltration, or harmful prompt injection was found.
Capability Tags
Capability Assessment
Purpose & Capability
The SKILL.md describes only generation of posts (no direct posting), and the registry declares no required credentials—this is plausible. However the SKILL.md metadata lists npm packages (threads-api, @atproto/api) suggesting code-level integration with Threads/Bluesky that would normally need auth. There's no formal install spec in the registry even though the SKILL.md advertises installs, creating an incoherence: either the skill will install/run those packages (which implies posting capability and credential needs) or it simply generates text. This gap is unexplained.
Instruction Scope
Runtime instructions are natural-language prompts to produce posts and image prompts; they do not instruct the agent to run curl or call any APIs, nor to read local files or environment variables beyond optional defaults. Yet the skill metadata lists curl as a required binary and references scheduling/analytics integrations—those operational steps (posting, scheduling, analytics) are not detailed in the instructions, which is a scope mismatch.
Install Mechanism
Registry metadata claims 'No install spec' but SKILL.md metadata includes an install list of npm packages (threads-api, @atproto/api). Instruction-only skills normally have no install footprint; embedding npm install hints inside SKILL.md without a formal install spec is inconsistent and raises risk: if the agent or integrator installs those packages they will pull code from npm (moderate risk). The package sources are standard npm names (not shady URLs), but the lack of an explicit install step in the registry is misleading.
Credentials
The skill requests no required credentials and only documents optional env vars for defaults (DEFAULT_PLATFORM, THREAD_LENGTH, etc.). For a generation-only tool this is proportional; but the SKILL.md claims scheduling and platform integrations (Threads/Bluesky) where API keys/tokens would normally be required. The absence of any declared API-key env variables is suspicious if the skill actually performs publishing or analytics calls.
Persistence & Privilege
No elevated privileges requested. always is false, autonomous invocation is allowed (platform default), and the skill does not request system config paths or persistent agent-wide modifications. Nothing here indicates unusual persistence or privilege escalation.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install social-media-automator - After installation, invoke the skill by name or use
/social-media-automator - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.2.0
**Expanded platform support and improved integration in v1.2.0**
- Added Threads and Bluesky as supported platforms in the skill description.
- Updated dependencies: replaced "bluesky-sdk" with "@atproto/api" for Bluesky compatibility.
- No changes to usage, commands, or core post-generation features.
v1.1.0
添加 Threads/Bluesky 支持、AI 标签生成优化、最佳发布时间推荐、A/B 测试功能
v1.0.1
**Changelog for v1.0.1**
- Updated SKILL.md to add QR code images for WeChat and Alipay support sections.
- No functional or feature changes; documentation update only.
v1.0.0
Major update: Adds video short scripts, AI image prompts, analytics features, improved A/B testing, and hashtag optimization.
- Added support for TikTok and YouTube Shorts video script generation.
- Introduced AI image prompts (DALL-E 3, Canva) for post visuals.
- Enhanced analytics and post performance tracking, including best time to post suggestions.
- Improved A/B testing with 3–5 post variations per platform.
- Upgraded hashtag optimization and Instagram story suggestions.
- Expanded support and contact options included.
v0.2.0
Added rss-to-social integration, improved hashtag suggestions, better platform formatting, A/B testing variations
Metadata
Frequently Asked Questions
What is Social Media Automator?
Automatically generate social media posts from articles. Supports Twitter, LinkedIn, Instagram, TikTok, YouTube Shorts, Threads, and Bluesky. Perfect for con... It is an AI Agent Skill for Claude Code / OpenClaw, with 880 downloads so far.
How do I install Social Media Automator?
Run "/install social-media-automator" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Social Media Automator free?
Yes, Social Media Automator is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Social Media Automator support?
Social Media Automator is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Social Media Automator?
It is built and maintained by fly3094 (@fly3094); the current version is v1.2.0.
More Skills