Rss To Social

Automatically monitor RSS feeds and post to social media. Schedule content, generate posts with AI, and publish to Twitter/LinkedIn.

This package appears to be an incomplete implementation: it will fetch RSS feeds, create post text, and print posts locally, but it does not actually post to Twitter/LinkedIn or integrate with Buffer/Hootsuite/Telegram despite claiming to do so. Before installing or providing any API credentials: 1) Review the script and confirm whether you need the actual posting capability — the current script does not use TWITTER_* or LINKEDIN_ACCESS_TOKEN. 2) If you plan to enable real posting, update the code to perform authenticated API calls securely (avoid hardcoding secrets) and review rate limits/permissions. 3) Note the script writes posted.json to .rss-to-social (or to RSS_TO_SOCIAL_DATA_DIR if you set it) — consider using an isolated workspace and backup/remove that file if needed. 4) Do not provide social account API keys until you verify the code path that uses them and test in a safe/test account. 5) If you expect fully automated posting, ask the publisher for a version that implements and documents the posting integrations (or add the functionality yourself) — the current mismatch between docs and code is why this is flagged suspicious.

Type: OpenClaw Skill Name: rss-to-social Version: 1.2.0 The skill is a legitimate RSS-to-social-media automation tool. The Python script (scripts/rss_monitor.py) uses the standard feedparser library to fetch content and implements local deduplication logic without any evidence of data exfiltration, unauthorized network calls, or shell execution. The SKILL.md documentation accurately describes the functionality and does not contain any prompt-injection attempts or hidden malicious instructions.