← 返回 Skills 市场
syeddhasnainn

Postqued API

作者 Hasnain · GitHub ↗ · v1.0.6
cross-platform ⚠ suspicious
688
总下载
2
收藏
0
当前安装
7
版本数
在 OpenClaw 中安装
/install postqued-api
功能描述
PostQued social media scheduling API integration. Use when performing API calls to PostQued for content upload, publishing to TikTok (and other platforms), m...
安全使用建议
This skill appears to be an instruction-only PostQued API helper and mostly does what it claims, but there are some red flags you should consider before installing: (1) The SKILL.md tells you to add POSTQUED_API_KEY to your workspace .env, yet the registry metadata does not declare that required env var or a primary credential — ask the publisher to correct the metadata so the platform can protect that secret. (2) The skill's source/homepage is unknown and it references a local file (references/api.md) that isn't bundled; prefer skills from identifiable authors or with published docs. (3) If you decide to use it, create a least-privilege PostQued API key (scoped/rotatable) and avoid storing high-privilege credentials in shared .env files. (4) Consider testing in an isolated workspace or sandbox and verify network calls (domain is api.postqued.com) before allowing autonomous invocation. If the publisher cannot explain the metadata omission and provenance, treat the skill with caution or avoid installing.
功能分析
Type: OpenClaw Skill Name: postqued-api Version: 1.0.6 The skill bundle is benign. All instructions and `curl` commands in SKILL.md are directly related to interacting with the legitimate PostQued API (api.postqued.com) for content upload and publishing. Authentication relies on an environment variable (`POSTQUED_API_KEY`), and file system access is required only for reading content to be uploaded, which is a necessary and expected behavior for a social media publishing skill. There is no evidence of prompt injection attempts, data exfiltration, malicious execution, persistence mechanisms, or any other harmful intent.
能力评估
Purpose & Capability
The SKILL.md describes a PostQued API integration (uploading, scheduling, TikTok publish) which is coherent with the skill name/description, but the declared registry metadata lists no required env vars or primary credential while the runtime instructions explicitly require POSTQUED_API_KEY. That metadata/requirement mismatch is an incoherence.
Instruction Scope
The instructions are narrowly scoped to API calls (upload/publish/status) and do not instruct the agent to read unrelated system files or exfiltrate data. However, they tell the user/agent to add a POSTQUED_API_KEY to the workspace .env and reference a local file (references/api.md) that is not present in the bundle, which suggests the instructions assume local workspace changes and missing documentation.
Install Mechanism
No install spec and no code files are present (instruction-only). This minimizes installation risk because nothing is downloaded or written by an installer step.
Credentials
The skill requires a single service API key (POSTQUED_API_KEY) according to SKILL.md, which is reasonable for this purpose — but the registry metadata does not declare this required env var or a primaryEnv. The omission is disproportionate and makes it unclear what secrets the platform should expect or protect. Storing the key in a workspace .env is also a potential exposure if other skills or processes have access.
Persistence & Privilege
The skill is not marked always:true and is user-invocable only; it does not request persistent system-wide privileges or modify other skills' configuration in its instructions.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install postqued-api
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /postqued-api 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.6
- No visible changes; this release contains no file modifications.
v1.0.5
- Clarified that the `contentIds` field should be used as an array in the publish request payload (was previously `contentId`). - Updated image upload instructions to explicitly set the `Content-Type: multipart/form-data` header. - No code or functional changes; documentation improvements only.
v1.0.4
- Updated documentation to clarify that the `publish` intent now means direct publish to the user's TikTok profile. - Removed note stating direct publish is disabled and requires API approval.
v1.0.3
- Removed the file references/api.md from the project. - No functional or documentation changes to the API
v1.0.2
- Added Polling Info
v1.0.1
Request body changes
v1.0.0
PostQued social media scheduling API integration. Use when performing API calls to PostQued for content upload, publishing to TikTok (and other platforms), managing platform accounts, or querying publish status. Triggers on tasks involving social media posting, content scheduling, TikTok draft posting, or any PostQued API operations.
元数据
Slug postqued-api
版本 1.0.6
许可证
累计安装 0
当前安装数 0
历史版本数 7
常见问题

Postqued API 是什么?

PostQued social media scheduling API integration. Use when performing API calls to PostQued for content upload, publishing to TikTok (and other platforms), m... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 688 次。

如何安装 Postqued API?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install postqued-api」即可一键安装,无需额外配置。

Postqued API 是免费的吗?

是的,Postqued API 完全免费(开源免费),可自由下载、安装和使用。

Postqued API 支持哪些平台?

Postqued API 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Postqued API?

由 Hasnain(@syeddhasnainn)开发并维护,当前版本 v1.0.6。

💬 留言讨论