← 返回 Skills 市场
98
总下载
0
收藏
1
当前安装
2
版本数
在 OpenClaw 中安装
/install openclaw-mark
功能描述
Facebook browser automation skill for posting, reading comments, generating intelligent replies, and tracking comment threads. Designed for brand engagement...
安全使用建议
This skill claims to automate Facebook posting and replies, which fits its description, but it does not include the scripts it instructs the agent to run and it fails to declare required runtime components (Node, Playwright/Chrome) or the fact it will use your local browser profile (cookies/session). Before installing or enabling: 1) Verify where the scripts (scripts/*.mjs) come from and review their code — they are not bundled. 2) Understand that the skill expects access to ~/.openclaw/browser/facebook-profile (a session) and will write receipts under ~/.openclaw/workspace/mark/ — this effectively lets it act as your logged-in Facebook user. 3) Prefer Draft/Human-approve modes until you can audit the runtime scripts and confirm safe behavior. 4) If you cannot review the scripts, run the skill only in an isolated environment/account and do not point it at a real personal/production Facebook session. Enabling auto-posting without these checks risks unintended posts or exposure of local data.
功能分析
Type: OpenClaw Skill
Name: openclaw-mark
Version: 1.0.1
The skill bundle defines a legitimate Facebook marketing automation workflow for an AI agent, including posting, comment monitoring, and context-aware replying. It specifies safety rules such as rate limiting and human-in-the-loop approvals, and its instructions in SKILL.md are consistent with the stated purpose without any evidence of data exfiltration, malicious execution, or prompt injection attacks.
能力评估
Purpose & Capability
The name/description (Facebook automation) matches the SKILL.md activities (posting, reading comments, replying). However the SKILL.md expects Node/Playwright scripts (node scripts/*.mjs) and a Playwright/Chrome runtime even though the registry metadata lists no required binaries or env vars. The skill also points to a browser profile (~/.openclaw/browser/facebook-profile) and references user-specific style files (/Users/m1/.openclaw/workspace-elon/SOUL.md). Requiring access to a browser profile and local style files is coherent for automation but should have been declared; the omission is an incoherence and increases risk.
Instruction Scope
The instructions tell the agent to run local scripts (facebook-poster.mjs, facebook-comments.mjs, facebook-reply.mjs) and to read/write files under ~/.openclaw/workspace/mark/ and specific user paths (e.g., /Users/m1/.openclaw/workspace-elon/SOUL.md). The skill instructs using the browser profile directory (likely containing session cookies) to perform Facebook actions. The bundle does not include these scripts, so the agent will rely on external code on the host. Instructions also include steps to inspect a specific account page (facebook.com/ray.luan) for recovery, which is a targeted action. Reading/writing these local paths and using an existing browser session gives the skill access to sensitive session data and local files beyond the skill bundle; that scope is not documented in metadata.
Install Mechanism
There is no install spec (instruction-only), which is lower risk in isolation. However the SKILL.md depends on Node and Playwright (and Chrome) but does not declare them in the registry metadata. Because the skill expects external runtime components and scripts not included in the package, the actual install/runtime environment becomes critical and opaque — this is a mismatch rather than an explicit install risk.
Credentials
No environment variables or credentials are declared, yet the skill explicitly depends on a local browser profile (which contains session cookies/access to a logged-in Facebook account). Access to that profile is effectively equivalent to requiring Facebook credentials but without declaring them. The SKILL.md also asks to read user-specific style/config files (Ray's voice file), which may contain private content. The skill's implicit need for sensitive local artifacts (browser session, workspace files) is not reflected in the declared requirements.
Persistence & Privilege
The skill is not marked always:true and follows normal autonomous-invocation defaults. That is expected for an automation skill. Still, because it operates on a browser profile and writes receipts/logs in the user's home directory, the practical privilege is significant (it can post as the logged-in account). The metadata does not document this level of system presence.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install openclaw-mark - 安装完成后，直接呼叫该 Skill 的名称或使用
/openclaw-mark触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
Updated name and description: English first, multilingual support
v1.0.0
Renamed from clawlite-mark to openclaw-mark
元数据
常见问题
Openclaw Facebook Marketing 是什么？
Facebook browser automation skill for posting, reading comments, generating intelligent replies, and tracking comment threads. Designed for brand engagement... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 98 次。
如何安装 Openclaw Facebook Marketing？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install openclaw-mark」即可一键安装，无需额外配置。
Openclaw Facebook Marketing 是免费的吗？
是的，Openclaw Facebook Marketing 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Openclaw Facebook Marketing 支持哪些平台？
Openclaw Facebook Marketing 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Openclaw Facebook Marketing？
由 X-RayLuan（@x-rayluan）开发并维护，当前版本 v1.0.1。
推荐 Skills