社交媒体自动化 - 自动发布到 Twitter/Instagram/LinkedIn

This package is inconsistent and incomplete. Before installing, ask the author for: (1) exact runtime steps and where code lives (source/repo), (2) how the 24x7 automation is implemented (service, daemon, scheduler), (3) which environment variables or OAuth tokens are required and how they are stored/secured, (4) API endpoints used for each social platform, and (5) an install spec or source code you can audit. Do not provide API keys or credentials until you can review the actual code and confirm where and how secrets will be used and stored. The 'primary credential: bash' entry is incorrect and a red flag—treat the skill as untrusted until these gaps are resolved.

Type: OpenClaw Skill Name: auto-social-post Version: 1.0.0 The bundle contains no functional code or implementation logic despite claiming to be a social media automation tool for Twitter, Instagram, and LinkedIn. It utilizes social engineering tactics in SKILL.md, such as promising 'earning potential' ($300-$600/month) and a 'price' ($150 USDC), which are highly atypical for technical skill bundles and characteristic of scams. The lack of any actual script while requiring 'curl' suggests this is either a fraudulent listing or a placeholder for future malicious payloads.