← 返回 Skills 市场
880
总下载
1
收藏
15
当前安装
5
版本数
在 OpenClaw 中安装
/install social-media-automator
功能描述
Automatically generate social media posts from articles. Supports Twitter, LinkedIn, Instagram, TikTok, YouTube Shorts, Threads, and Bluesky. Perfect for con...
安全使用建议
This skill appears to be primarily a text-generation helper, but there are several inconsistencies you should resolve before installing or granting it more access:
- Ask the publisher whether the skill only generates copy (safe) or also posts/schedules to platforms (requires API keys and network access). The SKILL.md hints at npm packages for Threads/Bluesky but the registry lists no install — get clarity on whether npm packages will be installed automatically.
- If you expect posting/scheduling, require explicit documentation of which environment variables (API keys/tokens) are needed, where credentials are stored, and exactly which endpoints the skill will call.
- Verify the source: metadata points to a GitHub repo in _meta.json but the 'Source' and 'Homepage' fields are unknown/none. Inspect the upstream repo and code before installing any npm packages.
- Because SKILL.md references installing npm packages, be cautious about automatic installs; npm packages run arbitrary code on install/use. Prefer a vetted release or review the package contents.
- Do not provide platform credentials (Twitter, Threads, Buffer, Hootsuite, DALL·E/OpenAI keys, etc.) until you confirm the integration method and trust the code.
If the publisher confirms the skill only generates posts locally (no external posting or hidden installs), the incoherences are likely just sloppy metadata (lower risk). If it actually installs npm packages or posts on your behalf, treat it as higher risk until source and credential handling are audited.
功能分析
Type: OpenClaw Skill
Name: social-media-automator
Version: 1.2.0
The skill bundle is a legitimate tool for generating social media content from articles. It utilizes standard dependencies like curl for fetching web content and official-looking NPM packages (@atproto/api, threads-api) for social media integration. The instructions in SKILL.md are well-aligned with the stated purpose, and no evidence of malicious intent, data exfiltration, or harmful prompt injection was found.
能力标签
能力评估
Purpose & Capability
The SKILL.md describes only generation of posts (no direct posting), and the registry declares no required credentials—this is plausible. However the SKILL.md metadata lists npm packages (threads-api, @atproto/api) suggesting code-level integration with Threads/Bluesky that would normally need auth. There's no formal install spec in the registry even though the SKILL.md advertises installs, creating an incoherence: either the skill will install/run those packages (which implies posting capability and credential needs) or it simply generates text. This gap is unexplained.
Instruction Scope
Runtime instructions are natural-language prompts to produce posts and image prompts; they do not instruct the agent to run curl or call any APIs, nor to read local files or environment variables beyond optional defaults. Yet the skill metadata lists curl as a required binary and references scheduling/analytics integrations—those operational steps (posting, scheduling, analytics) are not detailed in the instructions, which is a scope mismatch.
Install Mechanism
Registry metadata claims 'No install spec' but SKILL.md metadata includes an install list of npm packages (threads-api, @atproto/api). Instruction-only skills normally have no install footprint; embedding npm install hints inside SKILL.md without a formal install spec is inconsistent and raises risk: if the agent or integrator installs those packages they will pull code from npm (moderate risk). The package sources are standard npm names (not shady URLs), but the lack of an explicit install step in the registry is misleading.
Credentials
The skill requests no required credentials and only documents optional env vars for defaults (DEFAULT_PLATFORM, THREAD_LENGTH, etc.). For a generation-only tool this is proportional; but the SKILL.md claims scheduling and platform integrations (Threads/Bluesky) where API keys/tokens would normally be required. The absence of any declared API-key env variables is suspicious if the skill actually performs publishing or analytics calls.
Persistence & Privilege
No elevated privileges requested. always is false, autonomous invocation is allowed (platform default), and the skill does not request system config paths or persistent agent-wide modifications. Nothing here indicates unusual persistence or privilege escalation.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install social-media-automator - 安装完成后，直接呼叫该 Skill 的名称或使用
/social-media-automator触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.2.0
**Expanded platform support and improved integration in v1.2.0**
- Added Threads and Bluesky as supported platforms in the skill description.
- Updated dependencies: replaced "bluesky-sdk" with "@atproto/api" for Bluesky compatibility.
- No changes to usage, commands, or core post-generation features.
v1.1.0
添加 Threads/Bluesky 支持、AI 标签生成优化、最佳发布时间推荐、A/B 测试功能
v1.0.1
**Changelog for v1.0.1**
- Updated SKILL.md to add QR code images for WeChat and Alipay support sections.
- No functional or feature changes; documentation update only.
v1.0.0
Major update: Adds video short scripts, AI image prompts, analytics features, improved A/B testing, and hashtag optimization.
- Added support for TikTok and YouTube Shorts video script generation.
- Introduced AI image prompts (DALL-E 3, Canva) for post visuals.
- Enhanced analytics and post performance tracking, including best time to post suggestions.
- Improved A/B testing with 3–5 post variations per platform.
- Upgraded hashtag optimization and Instagram story suggestions.
- Expanded support and contact options included.
v0.2.0
Added rss-to-social integration, improved hashtag suggestions, better platform formatting, A/B testing variations
元数据
常见问题
Social Media Automator 是什么？
Automatically generate social media posts from articles. Supports Twitter, LinkedIn, Instagram, TikTok, YouTube Shorts, Threads, and Bluesky. Perfect for con... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 880 次。
如何安装 Social Media Automator？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install social-media-automator」即可一键安装，无需额外配置。
Social Media Automator 是免费的吗？
是的，Social Media Automator 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Social Media Automator 支持哪些平台？
Social Media Automator 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Social Media Automator？
由 fly3094（@fly3094）开发并维护，当前版本 v1.2.0。
推荐 Skills