← Back to Skills Marketplace
98
Downloads
0
Stars
1
Active Installs
2
Versions
Install in OpenClaw
/install openclaw-mark
Description
Facebook browser automation skill for posting, reading comments, generating intelligent replies, and tracking comment threads. Designed for brand engagement...
Usage Guidance
This skill claims to automate Facebook posting and replies, which fits its description, but it does not include the scripts it instructs the agent to run and it fails to declare required runtime components (Node, Playwright/Chrome) or the fact it will use your local browser profile (cookies/session). Before installing or enabling: 1) Verify where the scripts (scripts/*.mjs) come from and review their code — they are not bundled. 2) Understand that the skill expects access to ~/.openclaw/browser/facebook-profile (a session) and will write receipts under ~/.openclaw/workspace/mark/ — this effectively lets it act as your logged-in Facebook user. 3) Prefer Draft/Human-approve modes until you can audit the runtime scripts and confirm safe behavior. 4) If you cannot review the scripts, run the skill only in an isolated environment/account and do not point it at a real personal/production Facebook session. Enabling auto-posting without these checks risks unintended posts or exposure of local data.
Capability Analysis
Type: OpenClaw Skill
Name: openclaw-mark
Version: 1.0.1
The skill bundle defines a legitimate Facebook marketing automation workflow for an AI agent, including posting, comment monitoring, and context-aware replying. It specifies safety rules such as rate limiting and human-in-the-loop approvals, and its instructions in SKILL.md are consistent with the stated purpose without any evidence of data exfiltration, malicious execution, or prompt injection attacks.
Capability Assessment
Purpose & Capability
The name/description (Facebook automation) matches the SKILL.md activities (posting, reading comments, replying). However the SKILL.md expects Node/Playwright scripts (node scripts/*.mjs) and a Playwright/Chrome runtime even though the registry metadata lists no required binaries or env vars. The skill also points to a browser profile (~/.openclaw/browser/facebook-profile) and references user-specific style files (/Users/m1/.openclaw/workspace-elon/SOUL.md). Requiring access to a browser profile and local style files is coherent for automation but should have been declared; the omission is an incoherence and increases risk.
Instruction Scope
The instructions tell the agent to run local scripts (facebook-poster.mjs, facebook-comments.mjs, facebook-reply.mjs) and to read/write files under ~/.openclaw/workspace/mark/ and specific user paths (e.g., /Users/m1/.openclaw/workspace-elon/SOUL.md). The skill instructs using the browser profile directory (likely containing session cookies) to perform Facebook actions. The bundle does not include these scripts, so the agent will rely on external code on the host. Instructions also include steps to inspect a specific account page (facebook.com/ray.luan) for recovery, which is a targeted action. Reading/writing these local paths and using an existing browser session gives the skill access to sensitive session data and local files beyond the skill bundle; that scope is not documented in metadata.
Install Mechanism
There is no install spec (instruction-only), which is lower risk in isolation. However the SKILL.md depends on Node and Playwright (and Chrome) but does not declare them in the registry metadata. Because the skill expects external runtime components and scripts not included in the package, the actual install/runtime environment becomes critical and opaque — this is a mismatch rather than an explicit install risk.
Credentials
No environment variables or credentials are declared, yet the skill explicitly depends on a local browser profile (which contains session cookies/access to a logged-in Facebook account). Access to that profile is effectively equivalent to requiring Facebook credentials but without declaring them. The SKILL.md also asks to read user-specific style/config files (Ray's voice file), which may contain private content. The skill's implicit need for sensitive local artifacts (browser session, workspace files) is not reflected in the declared requirements.
Persistence & Privilege
The skill is not marked always:true and follows normal autonomous-invocation defaults. That is expected for an automation skill. Still, because it operates on a browser profile and writes receipts/logs in the user's home directory, the practical privilege is significant (it can post as the logged-in account). The metadata does not document this level of system presence.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openclaw-mark - After installation, invoke the skill by name or use
/openclaw-mark - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Updated name and description: English first, multilingual support
v1.0.0
Renamed from clawlite-mark to openclaw-mark
Metadata
Frequently Asked Questions
What is Openclaw Facebook Marketing?
Facebook browser automation skill for posting, reading comments, generating intelligent replies, and tracking comment threads. Designed for brand engagement... It is an AI Agent Skill for Claude Code / OpenClaw, with 98 downloads so far.
How do I install Openclaw Facebook Marketing?
Run "/install openclaw-mark" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Openclaw Facebook Marketing free?
Yes, Openclaw Facebook Marketing is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Openclaw Facebook Marketing support?
Openclaw Facebook Marketing is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Openclaw Facebook Marketing?
It is built and maintained by X-RayLuan (@x-rayluan); the current version is v1.0.1.
More Skills