AI驱动的社交媒体管理，自动生成内容日历，推荐最佳发布时间，智能回复互动，分析并优化表现，支持多平台发布。

This package appears to be a local/simulated social‑media manager rather than a real connector. Before installing or adding any account secrets: 1) Do not paste real passwords, cookies, or API keys into TOOLS.md or any file unless the code explicitly reads them. 2) Inspect the code (platform adapters) for real HTTP calls or SDK usage — currently adapters return mock objects and perform no network I/O. 3) If you need real posting/analytics, ask the author/maintainer whether and how credentials are consumed; do not assume the README is accurate. 4) Run the included tests locally in a safe environment to confirm behavior. 5) If you must supply credentials, prefer creating limited/sandbox/test accounts and revoke them afterward. The main issue is coherence and potential for users to expose secrets unnecessarily, not active malicious behavior.

Type: OpenClaw Skill Name: ai-social-media-manager Version: 1.0.0 The skill bundle is a well-documented template for an AI-driven social media management tool. The core logic in `src/index.js` and `src/platform-adapter.js` consists of deterministic algorithms for content scheduling and mock adapters for various social platforms (Twitter, Weibo, etc.). There is no evidence of data exfiltration, malicious execution, or obfuscation; the platform adapters are currently stubs that return hardcoded data rather than making actual network requests. While it instructs users to store credentials in `TOOLS.md`, this is consistent with the OpenClaw framework's standard operating procedure for handling secrets.