← Back to Skills Marketplace
syeddhasnainn

Postqued API

by Hasnain · GitHub ↗ · v1.0.6
cross-platform ⚠ suspicious
688
Downloads
2
Stars
0
Active Installs
7
Versions
Install in OpenClaw
/install postqued-api
Description
PostQued social media scheduling API integration. Use when performing API calls to PostQued for content upload, publishing to TikTok (and other platforms), m...
Usage Guidance
This skill appears to be an instruction-only PostQued API helper and mostly does what it claims, but there are some red flags you should consider before installing: (1) The SKILL.md tells you to add POSTQUED_API_KEY to your workspace .env, yet the registry metadata does not declare that required env var or a primary credential — ask the publisher to correct the metadata so the platform can protect that secret. (2) The skill's source/homepage is unknown and it references a local file (references/api.md) that isn't bundled; prefer skills from identifiable authors or with published docs. (3) If you decide to use it, create a least-privilege PostQued API key (scoped/rotatable) and avoid storing high-privilege credentials in shared .env files. (4) Consider testing in an isolated workspace or sandbox and verify network calls (domain is api.postqued.com) before allowing autonomous invocation. If the publisher cannot explain the metadata omission and provenance, treat the skill with caution or avoid installing.
Capability Analysis
Type: OpenClaw Skill Name: postqued-api Version: 1.0.6 The skill bundle is benign. All instructions and `curl` commands in SKILL.md are directly related to interacting with the legitimate PostQued API (api.postqued.com) for content upload and publishing. Authentication relies on an environment variable (`POSTQUED_API_KEY`), and file system access is required only for reading content to be uploaded, which is a necessary and expected behavior for a social media publishing skill. There is no evidence of prompt injection attempts, data exfiltration, malicious execution, persistence mechanisms, or any other harmful intent.
Capability Assessment
Purpose & Capability
The SKILL.md describes a PostQued API integration (uploading, scheduling, TikTok publish) which is coherent with the skill name/description, but the declared registry metadata lists no required env vars or primary credential while the runtime instructions explicitly require POSTQUED_API_KEY. That metadata/requirement mismatch is an incoherence.
Instruction Scope
The instructions are narrowly scoped to API calls (upload/publish/status) and do not instruct the agent to read unrelated system files or exfiltrate data. However, they tell the user/agent to add a POSTQUED_API_KEY to the workspace .env and reference a local file (references/api.md) that is not present in the bundle, which suggests the instructions assume local workspace changes and missing documentation.
Install Mechanism
No install spec and no code files are present (instruction-only). This minimizes installation risk because nothing is downloaded or written by an installer step.
Credentials
The skill requires a single service API key (POSTQUED_API_KEY) according to SKILL.md, which is reasonable for this purpose — but the registry metadata does not declare this required env var or a primaryEnv. The omission is disproportionate and makes it unclear what secrets the platform should expect or protect. Storing the key in a workspace .env is also a potential exposure if other skills or processes have access.
Persistence & Privilege
The skill is not marked always:true and is user-invocable only; it does not request persistent system-wide privileges or modify other skills' configuration in its instructions.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install postqued-api
  3. After installation, invoke the skill by name or use /postqued-api
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.6
- No visible changes; this release contains no file modifications.
v1.0.5
- Clarified that the `contentIds` field should be used as an array in the publish request payload (was previously `contentId`). - Updated image upload instructions to explicitly set the `Content-Type: multipart/form-data` header. - No code or functional changes; documentation improvements only.
v1.0.4
- Updated documentation to clarify that the `publish` intent now means direct publish to the user's TikTok profile. - Removed note stating direct publish is disabled and requires API approval.
v1.0.3
- Removed the file references/api.md from the project. - No functional or documentation changes to the API
v1.0.2
- Added Polling Info
v1.0.1
Request body changes
v1.0.0
PostQued social media scheduling API integration. Use when performing API calls to PostQued for content upload, publishing to TikTok (and other platforms), managing platform accounts, or querying publish status. Triggers on tasks involving social media posting, content scheduling, TikTok draft posting, or any PostQued API operations.
Metadata
Slug postqued-api
Version 1.0.6
License
All-time Installs 0
Active Installs 0
Total Versions 7
Frequently Asked Questions

What is Postqued API?

PostQued social media scheduling API integration. Use when performing API calls to PostQued for content upload, publishing to TikTok (and other platforms), m... It is an AI Agent Skill for Claude Code / OpenClaw, with 688 downloads so far.

How do I install Postqued API?

Run "/install postqued-api" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Postqued API free?

Yes, Postqued API is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Postqued API support?

Postqued API is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Postqued API?

It is built and maintained by Hasnain (@syeddhasnainn); the current version is v1.0.6.

💬 Comments