ProductClank — Community-Powered Growth

Community-powered growth for builders. Boost amplifies your social posts with authentic community engagement (replies, likes, reposts). Discover finds releva...

What to consider before installing: - The skill's runtime docs and scripts expect an API key in PRODUCTCLANK_API_KEY, but the skill listing does not declare any required env vars. Confirm with the publisher: do you need to set PRODUCTCLANK_API_KEY? The mismatch could be a packaging/metadata bug or an intentional omission. - The files reference multiple API hostnames (app.productclank.com vs api.productclank.com). Verify the correct endpoints with the vendor before supplying credentials. - The SKILL.md documents a self-register flow that returns an API key instantly. If you allow the agent to run autonomously, it could register itself and obtain credentials without explicit human approval, then create campaigns and consume credits. If you are not comfortable with that, do not enable autonomous invocation or provide the key. - Only provide an API key you trust and can revoke. Prefer creating a limited-scope/test key or linking the agent to an owner account (per docs) rather than granting full live credentials. - If you need higher assurance: request the publisher to correct the registry metadata to declare PRODUCTCLANK_API_KEY as required, unify the documented API hostnames, and confirm whether agent self-registration should be allowed by default. If the publisher is unknown or cannot confirm, avoid installing or run in a restricted/test environment first.

Type: OpenClaw Skill Name: productclank-community-growth Version: 1.0.0 The skill bundle provides a legitimate integration for ProductClank, a social media growth and engagement platform. It contains well-documented instructions in SKILL.md and README.md for an AI agent to manage marketing campaigns, including 'Boost' and 'Discover' capabilities. The included Node.js script (scripts/create-campaign.mjs) is a standard API client that interacts with the official domain (app.productclank.com) using a user-provided API key. There is no evidence of data exfiltration, malicious execution, or prompt injection intended to subvert the agent's behavior.