← Back to Skills Marketplace
sergebulaev

Publora

by Sergey Bulaev · GitHub ↗ · v1.2.1 · MIT-0
cross-platform ⚠ suspicious
748
Downloads
0
Stars
1
Active Installs
4
Versions
Install in OpenClaw
/install publora
Description
Publora API — schedule and publish social media posts across 10 platforms (X/Twitter, LinkedIn, Instagram, Threads, TikTok, YouTube, Facebook, Bluesky, Masto...
Usage Guidance
This SKILL.md appears to be a straightforward client for the Publora REST API, but before installing or using it you should: 1) verify the service and endpoints by visiting publora.com (the skill metadata has no homepage or source URL); 2) confirm how/where you will supply your x-publora-key — avoid pasting long-lived keys into prompts if you don't trust the skill or agent UI; 3) prefer creating a limited/test API key (or sandbox account) with minimal permissions for initial testing; 4) check Publora's privacy and webhook behavior (webhooks or media uploads may expose content/URLs externally); and 5) if the agent asks to store the key, verify storage policy and delete any test keys afterward. The main issues are the missing source/homepage and the fact the skill does not declare the required API credential — both are legitimate reasons to pause and validate provenance before proceeding.
Capability Analysis
Type: OpenClaw Skill Name: publora Version: 1.2.1 The skill bundle for 'publora' is a standard API integration for a social media scheduling and publishing service. The SKILL.md file provides legitimate instructions and code snippets (JavaScript, Python, and Bash) for interacting with the Publora REST API (api.publora.com), covering authentication, post management, media uploads, and analytics without any evidence of malicious intent, data exfiltration, or harmful prompt injection.
Capability Assessment
Purpose & Capability
SKILL.md documents Publora endpoints for posting, scheduling, media uploads, webhooks, and analytics which align with the declared purpose (multi-platform social publishing). However the package metadata provides no source or homepage, and the skill does not declare any required API key even though every request in the instructions requires an x-publora-key. This is an inconsistency worth noting.
Instruction Scope
Instructions are focused on calling publora.com API endpoints (platform-connections, create-post, list-posts, get-upload-url, etc.). They do not instruct the agent to read local files, environment variables, or unrelated system state, nor do they direct data to unexpected external endpoints beyond publora.com and pre-signed upload URLs.
Install Mechanism
No install spec and no code files (instruction-only). This minimizes filesystem risk because nothing is downloaded or written by the skill itself.
Credentials
The runtime examples require an API key sent in the x-publora-key header (keys beginning with sk_). Yet the skill metadata declares no required environment variables or primary credential. The skill will therefore rely on the agent or user to supply secrets ad hoc; that mismatch is a proportionality/information gap and a potential usability/security risk (users may be prompted to paste secrets without a clear storage policy).
Persistence & Privilege
always is false and there are no install actions. The skill does not request persistent privileges or modify other skills or system config per the provided files.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install publora
  3. After installation, invoke the skill by name or use /publora
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.2.1
Fix: Starter plan gives API access (LinkedIn & Bluesky); Twitter requires Pro+. Fix LinkedIn analytics queryTypes array. Fix threading: nested threads disabled on Threads. Fix workspace: username, _id, dailyPostsLeft.
v1.2.0
March 2026: Workspace/B2B API, Webhooks, LinkedIn analytics, updated limits, new endpoints (test-connection, post-logs, list-posts pagination), Threads nesting warning
v1.1.0
Add complete media upload workflow (3-step S3 pre-signed), carousel upload guide, --- thread separator for X and Threads
v1.0.0
Initial release
Metadata
Slug publora
Version 1.2.1
License MIT-0
All-time Installs 1
Active Installs 1
Total Versions 4
Frequently Asked Questions

What is Publora?

Publora API — schedule and publish social media posts across 10 platforms (X/Twitter, LinkedIn, Instagram, Threads, TikTok, YouTube, Facebook, Bluesky, Masto... It is an AI Agent Skill for Claude Code / OpenClaw, with 748 downloads so far.

How do I install Publora?

Run "/install publora" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Publora free?

Yes, Publora is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Publora support?

Publora is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Publora?

It is built and maintained by Sergey Bulaev (@sergebulaev); the current version is v1.2.1.

💬 Comments