Agent Reach

Give your AI agent eyes to see the entire internet. Install and configure upstream tools for Twitter/X, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu, Douyi...

This skill appears to do what it claims (set up many platform access tools), but it asks for high-risk actions that you should not do lightly. Before installing or running it: (1) do not paste real primary-account cookies — use a dedicated throwaway account if you must test; (2) avoid the '--from-browser' auto-extract option unless you run the installer locally and trust the codebase; (3) prefer OAuth/API tokens scoped minimally rather than raw session cookies; (4) do not pip install unpinned archives from main branches without reviewing the repository; ask the author for a pinned release or a reproducible install spec and review the code in https://github.com/Panniantong/agent-reach if possible; (5) expect the tool to write persistent credentials under ~/.agent-reach — inspect and securely delete/revoke them if needed; (6) consider running this in an isolated VM/container and revoke any cookies/tokens after use. The registry metadata not declaring required credentials or config paths is a red flag — request clarification from the publisher before proceeding.

Type: OpenClaw Skill Name: skill-9 Version: 0.1.0 The skill bundle installs a management toolset from a remote GitHub repository (Panniantong/agent-reach) to enable agent access to various social media platforms. It includes high-risk capabilities such as automated extraction of session cookies from local browsers (`--from-browser chrome`) and instructions for the agent to handle sensitive authentication tokens for platforms like Twitter and LinkedIn. While these features are functionally relevant to the stated goal of platform integration, the combination of remote code execution during setup and the handling of sensitive browser data presents a significant security risk.