Social Content Pro

AI-powered social media content generator by Automaton. Viral content creation for TikTok, Instagram, Twitter, LinkedIn, Xiaohongshu.

This skill appears functionally consistent for generating simulated content locally (viral hooks, hashtag suggestions), but it also advertises auto-posting, analytics, and competitor analysis without documenting how to connect real social accounts or where needed credentials come from. Before installing or providing any API keys: - Ask the author/maintainer: what is the constructor apiKey used for, and how do you connect real social accounts (OAuth flow, where are tokens stored)? - Inspect the rest of index.js (full file) for any network calls (fetch/https/request/axios) or hardcoded endpoints. If any exist, ask what endpoints are contacted and why. - If you plan to enable auto-posting, require explicit instructions about OAuth flows and where tokens are stored; never paste platform OAuth tokens into a skill without understanding the endpoint and storage. - Run the included tests locally in an isolated environment to see whether the module simulates data or actually attempts network access. Monitor outbound network traffic while running tests. - Prefer skills that clearly document required credentials and show secure token handling; if the skill only simulates analytics/competitor data, treat pro features (auto-post) as marketing claims unless proven otherwise. Given the omission of integration details and credentials, proceed cautiously — the code likely works as an offline generator, but the advertised live integrations are unproven and under-documented.

Type: OpenClaw Skill Name: social-content-pro-automaton Version: 1.0.1 The social-content-pro-automaton skill is a social media content generation tool that appears to be a functional mock-up or template. The core logic in index.js uses local templates, hardcoded hashtag databases, and randomized simulations to generate content ideas and schedules without performing any network requests, file system operations, or shell executions. While the SKILL.md includes advertisements for paid services and the code does not actually utilize the defined API key, there are no indicators of malicious intent, data exfiltration, or prompt injection.