OpenClaw Social Post

Post and reply to X/Twitter and Farcaster with text and images. Features multi-account support, dynamic Twitter tier detection (Basic/Premium), auto-variation to avoid duplicate content detection, draft preview, character validation, threads, replies, and image uploads. Consumption-based pricing for X API, pay-per-cast for Farcaster.

Do not run this skill with live credentials until these issues are resolved. Specific recommendations: - Ask the author to remove hardcoded /home/phan_harry paths and use $HOME or relative paths so the skill accesses the current user's files only. - Require and document all needed credentials explicitly (Farcaster custody and signer keys, FARCASTER_CUSTODY_ADDRESS, and any OPENCLAW_GPG_PASSPHRASE), or avoid reading unrelated host files. - Declare all runtime binaries (node, npm, gpg) and Node package dependencies (e.g., @farcaster/hub-nodejs) or provide an install spec that installs them from known sources. - Fix tier-detection so it does not attempt real POSTs as a detection method (use safe API endpoints or explicit capability calls that don't create posts), and make dry-run behavior reliable. - Confirm presence or provide the missing TWITTER_POST_SCRIPT and farcaster-agent repo (or remove reliance on external skill repos). - If you must test, run the skill in an isolated environment (throwaway account/container) and inspect network calls (outbound endpoints) and file accesses first. If you don't control or verify these fixes, treat the skill as risky because it may read host-specific secrets and could perform unintended posts or external network operations.

Type: OpenClaw Skill Name: openclaw-social-post Version: 1.5.0 The skill exhibits several vulnerabilities, primarily the use of the `source` command on `.env` files in `lib/farcaster.sh`, `lib/tier-detection.sh`, and `lib/twitter.sh`. This creates a shell injection risk if the `.env` file can be manipulated by an attacker. Additionally, `lib/twitter.sh` references an external script, `twitter-post.sh`, at an absolute path (`/home/phan_harry/.openclaw/workspace/scripts/twitter-post.sh`) which is not included in the bundle and is an undeclared dependency, posing a supply chain risk and functional flaw. While there is no clear evidence of intentional malicious behavior like data exfiltration to unauthorized endpoints or prompt injection attempts against the agent, these vulnerabilities are significant.