Twinfold

Create, adapt, schedule, publish, and analyze AI-generated social media content across 10 platforms in 13 languages using Twinfold's API.

This skill looks functionally consistent with a Twinfold API integration, but take these precautions before installing: 1) Resolve the metadata mismatch — the SKILL.md requires TWINFOLD_API_KEY but the registry summary claims no env vars; ask the publisher to clarify. 2) Source and homepage are missing — verify twinfold.app is the legitimate service and that the skill is published by a trusted party before supplying credentials. 3) Use a revocable/test API key with minimal permissions and monitor account activity and credit usage (autoPublish/autopilot can spend credits and post on your accounts). 4) Review the platform's privacy/billing terms and consider creating a separate Twinfold account for integration testing. 5) If you proceed, watch network/activity logs for unexpected endpoints and revoke the key if anything suspicious occurs.

Type: OpenClaw Skill Name: twinfold Version: 1.0.3 The OpenClaw AgentSkills bundle for Twinfold is benign. All files (metadata, SKILL.md, and references/workflows.md) consistently describe an interface to a social media content platform. The skill requires a `TWINFOLD_API_KEY` for authentication to `https://twinfold.app/api/mcp/tools`, which is a legitimate and expected use of credentials. All described API calls and workflows are aligned with the stated purpose of creating, managing, and publishing social media content. There is no evidence of data exfiltration, malicious execution (e.g., `curl | bash`), persistence mechanisms, or prompt injection attempts designed to subvert the agent's behavior beyond its stated purpose. The `curl` commands in the documentation serve as examples of API interaction, not as instructions for the agent to execute arbitrary shell commands.