Bluesky

Bluesky/AT Protocol orchestration skill for authenticated interaction with the Bluesky Social network: post, reply, like, repost, quote, bookmark, and upload...

This skill appears to implement exactly what it claims (authenticated Bluesky posting and media uploads) and asks for a Bluesky app password and handle — which is expected. However, the package/registry metadata omitted those required env vars, so verify before installing: 1) Confirm the platform will prompt you to provide BSKY_APP_PASSWORD and will treat it as a secret (do not paste your primary account password). 2) Review the referenced GitHub repo and the 'atproto' pip package to ensure they are the expected, official implementations (confirm package name, source, and recent activity). 3) Understand that once installed with your app password the skill can post/like/repost as your app; grant only the minimal app-password permissions and rotate/revoke the app password if you remove the skill. 4) If you need higher assurance, ask the maintainer to update the registry metadata to list required env vars/primary credential so the platform can surface permissions correctly.

Type: OpenClaw Skill Name: openclaw-bluesky Version: 0.1.7 The skill is a standard and well-documented implementation for interacting with the Bluesky/AT Protocol social network using the official 'atproto' Python SDK. It follows security best practices by requiring App Passwords instead of primary credentials and correctly identifies secrets in the metadata. No evidence of malicious intent, data exfiltration, or unauthorized code execution was found in lib/bluesky_agent.py or the instructions in SKILL.md.