Social Insights

Social media analytics and performance tracking. Track engagement, optimal posting times, competitor analysis, AI-powered insights, auto-generated charts, an...

This package advertises live, multi-platform social analytics but the included Python script only generates static demo reports and does not call any external APIs. Before installing or supplying credentials: 1) Confirm whether there are additional source files or a newer version that actually implements API integrations; ask the publisher for a homepage or source repository. 2) Do not provide real API keys/tokens until you can review code that uses them and confirm the network endpoints it contacts. 3) If you need to test it, run the script in an isolated environment (sandbox/container) and monitor outbound network activity to see whether it contacts expected platform APIs. 4) Ask the author to fix the metadata mismatches (env var names and documented requirements) and provide documentation for how report delivery and scheduling are performed. These inconsistencies may be benign (unfinished/demo code) but they should be clarified before trusting any sensitive credentials.

Type: OpenClaw Skill Name: social-insights Version: 1.3.0 The skill is classified as suspicious due to a significant discrepancy between its documentation and its actual implementation. While SKILL.md claims to provide 'AI-powered' social media analytics and requests sensitive API credentials (Twitter, LinkedIn, Threads, Bluesky), the provided script (scripts/analyzer.py) contains only hardcoded sample data and does not actually perform any analytics or utilize the requested environment variables. This deceptive behavior—requesting high-value secrets for a non-functional 'mock' script—is a strong indicator of a potential credential-harvesting setup or a social engineering attempt to gain access to user API keys.