Social Media Autopilot

Generate a complete 7-day social media content calendar with Instagram-ready captions, hashtags, optimal posting times, and content mix strategy for any brand.

This skill appears to implement the advertised feature (7-day calendar using Gemini), but exercise caution before installing: 1) The code hardcodes a user-specific .env path (/Users/edwin/...) and will try to load GEMINI_API_KEY from there — verify that path and remove or generalize it so the skill reads the key from a configured environment variable instead of a specific user's file. 2) Ensure your .env does not contain unrelated secrets; if you must run it, supply GEMINI_API_KEY in a controlled environment variable rather than placing many secrets in the referenced file. 3) Because the registry metadata does not declare GEMINI_API_KEY, expect that you need to provide the key manually; confirm the skill owner and provenance before granting API credentials. 4) Manually inspect the code (autopilot.py) and run it in an isolated environment (container or throwaway VM) the first time. 5) If you will allow autonomous invocation by an agent, consider restricting which agents can call this skill until the path and credential handling are fixed. If you need, ask the publisher to: remove hardcoded paths, declare required env vars in metadata, and document how credentials should be provided securely.

Type: OpenClaw Skill Name: openclaw-social-media-autopilot Version: 1.0.0 The skill is a legitimate social media content generator that uses the Gemini API to produce a 7-day calendar. The code logic in `autopilot.py` and the instructions in `SKILL.md` are consistent with the stated purpose and include safety instructions for the agent to seek user approval before publishing. The only notable issue is a hardcoded absolute path to a `.env` file (`/Users/edwin/.openclaw/workspace/dreams-arts/.env`), which is a portability flaw and poor security practice but does not indicate malicious intent or provide a mechanism for data exfiltration.