← Back to Skills Marketplace
Xanadu Social Media Manager
by
saintlittlefish
· GitHub ↗
· v1.2.0
388
Downloads
0
Stars
1
Active Installs
3
Versions
Install in OpenClaw
/install xanadu-social-manager
Description
Use this skill when the user wants to manage social media scheduling, analytics, cross-posting, or AI-assisted content creation across Instagram, TikTok, Twi...
Usage Guidance
Do not install or run this skill without addressing the bundled hardcoded credentials. The package includes scripts/billing_config.py that contains a SKILLPAY_API_KEY and owner wallet — that could allow the skill owner to collect charges or otherwise act on your behalf. Recommended actions before using: 1) Remove or overwrite scripts/billing_config.py and provide your own SKILLPAY_API_KEY via environment variables if you choose to enable monetization. 2) Rotate any exposed API key immediately (the included key should be treated as compromised). 3) Audit billing.py to ensure it cannot charge users silently and that charges require explicit, documented user consent. 4) Provide platform API tokens yourself (do not rely on any bundled secrets). 5) If you want to test, run the skill in an isolated environment/container and monitor outbound network requests. If you are not comfortable with a bundled hardcoded key or the owner-controlled wallet, consider rejecting this skill.
Capability Analysis
Type: OpenClaw Skill
Name: xanadu-social-manager
Version: 1.2.0
The skill bundle contains a hardcoded API key in 'scripts/billing_config.py', which directly contradicts the explicit security warnings in 'SKILL.md' regarding credential management. Furthermore, 'scripts/billing.py' implements a monetization framework that makes outbound network requests to 'api.skillpay.me' to charge users; while documented as a feature, the combination of automated billing logic and poor credential hygiene is a significant security risk.
Capability Assessment
Purpose & Capability
Name, description, and bundled scripts (scheduler, analytics, billing) align with a social-media manager. However, the registry metadata lists no required env vars while SKILL.md instructs users to provide platform API keys and optionally a SKILLPAY_API_KEY — this mismatch is inconsistent. The included billing_config.py (with a hardcoded SKILLPAY_API_KEY and owner wallet) is not necessary for the core scheduling/analytics capability and appears intended to enable owner monetization by default, which is disproportionate to the skill's stated purpose.
Instruction Scope
SKILL.md limits actions (requires human approval before posting/replying) and instructs users to supply platform credentials. The instructions do not mention bundling a billing_config.py with a hardcoded api key, yet the runtime code will import that file if present. That means runtime behavior could use the included billing credentials without explicit user configuration, which is outside the documented/informed scope.
Install Mechanism
No install spec present (instruction-only skill). All code is bundled in the skill package; nothing is downloaded from external URLs during install. This lowers install-time risk.
Credentials
The manifest declares no required env vars, but the skill legitimately needs platform API keys (per SKILL.md). More importantly, the bundle contains scripts/billing_config.py with a hardcoded SKILLPAY_API_KEY and OWNER_WALLET. Hardcoded credentials in a distributed skill are a significant red flag: they grant the author/owner an effective credential without the user's consent and are disproportionate to normal operation.
Persistence & Privilege
The skill does not request 'always: true' or modify other skills or system-wide settings. It writes a local queue.json to manage posts (normal for a scheduler). Autonomous invocation is allowed (platform default) but is not combined here with explicit elevated persistence.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install xanadu-social-manager - After installation, invoke the skill by name or use
/xanadu-social-manager - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.2.0
- Added new configuration file: scripts/billing_config.py.
- Updated scripts/billing.py for improved billing integration or configuration handling.
- No changes to SKILL.md content or user-facing documentation.
v1.1.0
- Refined SkillPay monetization setup: users must now configure their own credentials; hardcoded API keys are explicitly discouraged.
- Billing integration simplified and clarified, with support for environment variable configuration.
- Updated documentation to highlight user responsibility for credential management and security.
- Removed legacy billing config files (`SKILLPAY_CONFIG.md`, `scripts/billing_config.py`).
v1.0.0
- Initial release of Social Media Manager skill.
- Schedule posts across Instagram, TikTok, Twitter/X, LinkedIn, and Facebook.
- AI-assisted auto-reply to comments and DMs, pending user approval.
- Pull and compare analytics from multiple platforms.
- Cross-posting with platform-specific adaptation (format, hashtags, timing).
- SkillPay integration for monetization with multiple pricing tiers.
- Includes scheduling scripts, analytics scripts, billing integration, and content templates.
Metadata
Frequently Asked Questions
What is Xanadu Social Media Manager?
Use this skill when the user wants to manage social media scheduling, analytics, cross-posting, or AI-assisted content creation across Instagram, TikTok, Twi... It is an AI Agent Skill for Claude Code / OpenClaw, with 388 downloads so far.
How do I install Xanadu Social Media Manager?
Run "/install xanadu-social-manager" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Xanadu Social Media Manager free?
Yes, Xanadu Social Media Manager is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Xanadu Social Media Manager support?
Xanadu Social Media Manager is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Xanadu Social Media Manager?
It is built and maintained by saintlittlefish (@saintlittlefish); the current version is v1.2.0.
More Skills