Publora Bluesky

Post or schedule content to Bluesky using the Publora API. Use this skill when the user wants to publish or schedule Bluesky posts via Publora.

This skill appears to do exactly what it says: use the Publora API to post or schedule Bluesky content. Before installing or invoking it: (1) Verify you trust Publora and the skill publisher (owner is unknown here). (2) Do not share your main Bluesky password — create and use an app password as instructed. (3) Provide the Publora API key and any app password as secrets (environment variables or secure prompts) rather than pasting them into public chat. (4) Note that image uploads require the agent/process to access local files (e.g., photo_compressed.jpg) — only allow that if you intend the agent to read those files. (5) Because the SKILL.md references a separate 'publora core skill' and does not declare credential env vars, expect some manual setup; confirm where and how the agent will store/obtain the x-publora-key before granting access.

Type: OpenClaw Skill Name: publora-bluesky Version: 1.2.1 The skill bundle provides documentation and code examples for integrating with the Publora API to manage Bluesky posts. The instructions in SKILL.md are consistent with the stated purpose, using standard API patterns and security best practices such as recommending Bluesky app passwords. No indicators of data exfiltration, malicious execution, or prompt injection were found.