Macrocosmos

Fetch real-time social media data from X (Twitter) and Reddit by keyword, username, date range, and filters with engagement metrics via Macrocosmos SN13 API.

Do not install or supply secrets until the metadata mismatch is resolved. Specific actions to consider: 1) Ask the skill publisher to update registry metadata to declare MC_API as a required secret and to provide the GitHub/PyPI homepage/source links they cite in SKILL.md. 2) Verify the upstream repository (https://github.com/macrocosm-os/macrocosmos-mcp) and PyPI package to ensure the package and endpoint are legitimate. 3) If you must test, create a low-privilege or limited-use MC_API key and avoid using high-privilege credentials. 4) Confirm the domain (constellation.api.cloud.macrocosmos.ai) is the intended recipient of the key and review the provider's privacy/data retention policy. 5) Request an explicit install spec if you expect the Python SDK to be used (so installations are visible/auditable). The current inconsistencies could be innocent (metadata omission) but should be fixed before granting access to secrets.

Type: OpenClaw Skill Name: social-data Version: 1.0.4 The skill bundle is benign. The `SKILL.md` provides clear instructions and examples for interacting with the Macrocosmos SN13 API to fetch social media data. All API calls are directed to `constellation.api.cloud.macrocosmos.ai`, and the required `MC_API` key is used for legitimate authentication. There is no evidence of prompt injection against the agent, unauthorized data exfiltration, malicious execution, persistence mechanisms, or obfuscation. The instructions for the LLM agent are focused on best practices for using the API effectively.