Content Repurposer

Repurpose any blog post or article into multiple social media formats. Input a URL or text, get X/Twitter thread, LinkedIn post, Instagram caption, email sni...

This skill appears coherent and implements exactly what it says: fetching an article (only when you supply a URL), extracting text, and building platform-specific posts. Before installing or running: (1) inspect scripts/repurpose.py yourself (it is bundled and readable); (2) be aware the script will perform an HTTP GET to any URL you provide—avoid pointing it at internal or private endpoints; (3) install and run in an isolated environment if you are unsure (virtualenv/container); (4) note that generated content may reproduce copyrighted text from the source—review before posting; and (5) the agent can invoke the skill normally (default), so if you want to prevent autonomous runs, disable/limit skill invocation in your agent settings.

Type: OpenClaw Skill Name: oc-content-repurposer Version: 1.0.0 The `scripts/repurpose.py` file contains vulnerabilities that could be exploited via prompt injection against the AI agent. Specifically, the `file` command allows reading content from arbitrary local file paths (Local File Disclosure), and the `url` command fetches content from arbitrary URLs (Server-Side Request Forgery). While the script itself does not exfiltrate data or perform other malicious actions, these flaws could lead to unauthorized access or disclosure of sensitive information if the agent is tricked into providing malicious inputs.