Publora Threads

Post or schedule content to Threads using the Publora API. Use this skill when the user wants to publish or schedule a Threads post via Publora.

This skill appears to implement exactly what it says (posting/scheduling to Publora) but it omits a clear declaration of the API credential it needs. Before installing or enabling it: 1) Verify how your agent will supply the Publora API key (ask the publisher to declare a required env like PUBLORA_API_KEY or document usage of a separate 'publora' core skill). 2) Only provide a Publora key you trust—prefer a limited-scope or test account key for initial use. 3) Understand that media will be uploaded to presigned URLs (S3) and content will be sent to api.publora.com; confirm this matches your privacy/compliance needs. 4) If you cannot confirm where the key is stored or how it's protected, treat the missing credential declaration as a red flag and request clarification from the publisher before proceeding.

Type: OpenClaw Skill Name: publora-threads Version: 2.0.1 The skill bundle provides legitimate instructions and API documentation for integrating with the Publora service to manage Threads posts. The code snippets in SKILL.md demonstrate standard REST API interactions and S3 uploads without any signs of malicious execution, data exfiltration, or prompt injection.