Powerpost

Generate social media content and publish to all major platforms from one command.

This skill appears to do what it says: it calls powerpost.ai with the two declared credentials and uses curl to upload media, generate content, create drafts, and publish. Before installing: 1) Only provide a read_write API key if you trust automatic publishing — prefer a read_draft key if you want human review before posts go live. 2) Be aware that any files you upload and any research URLs you provide will be sent to powerpost.ai; do not include private/secrets-containing URLs or sensitive files. 3) The API key will be stored in your OpenClaw configuration if you use the suggested commands — treat it like any other secret (limit access, rotate/revoke if compromised). 4) Verify PowerPost account connections (connected social accounts) and the service's reputation/policy if you depend on it for publishing. If you want more assurance, ask for the vendor's privacy/security docs or run with a read_draft key first.

Type: OpenClaw Skill Name: openclaw-powerpost Version: 0.3.0 The 'powerpost' skill is a legitimate integration for the powerpost.ai social media management platform, allowing agents to generate and publish content. It uses standard REST API patterns via curl, restricts network access to a single domain (powerpost.ai), and includes explicit instructions in SKILL.md for the agent to obtain user confirmation before any publishing actions. The required environment variables (POWERPOST_API_KEY and POWERPOST_WORKSPACE_ID) are necessary for the stated purpose, and no evidence of malicious intent, data exfiltration, or prompt injection was found.