Publora

Publora API — schedule and publish social media posts across 10 platforms (X/Twitter, LinkedIn, Instagram, Threads, TikTok, YouTube, Facebook, Bluesky, Masto...

This SKILL.md appears to be a straightforward client for the Publora REST API, but before installing or using it you should: 1) verify the service and endpoints by visiting publora.com (the skill metadata has no homepage or source URL); 2) confirm how/where you will supply your x-publora-key — avoid pasting long-lived keys into prompts if you don't trust the skill or agent UI; 3) prefer creating a limited/test API key (or sandbox account) with minimal permissions for initial testing; 4) check Publora's privacy and webhook behavior (webhooks or media uploads may expose content/URLs externally); and 5) if the agent asks to store the key, verify storage policy and delete any test keys afterward. The main issues are the missing source/homepage and the fact the skill does not declare the required API credential — both are legitimate reasons to pause and validate provenance before proceeding.

Type: OpenClaw Skill Name: publora Version: 1.2.1 The skill bundle for 'publora' is a standard API integration for a social media scheduling and publishing service. The SKILL.md file provides legitimate instructions and code snippets (JavaScript, Python, and Bash) for interacting with the Publora REST API (api.publora.com), covering authentication, post management, media uploads, and analytics without any evidence of malicious intent, data exfiltration, or harmful prompt injection.