Daily Social Media Publisher

Daily social media posting with NewsAPI for PayLessTax & LevelUpLove

This skill appears to implement the advertised social-posting workflow, but there are configuration and declaration mismatches you should resolve before installing: - Credentials and configs: SKILL.md documents API keys (NewsAPI, Templated.io, UploadPost) but the registry shows no required env vars. Decide where secrets must be provided (CLI args, config JSONs, or env vars) and avoid pasting keys into an unclear location. Prefer using a config file passed explicitly or environment variables that your runtime environment controls. - Config paths: The included config JSONs reference paths like data/oneliners/... whereas the repository provides oneliners/*.json. Confirm which file paths the running agent will use to avoid silent failures or accidental default behavior. - Endpoints: The code defaults to posted endpoints (api.templated.io and api.upload-post.com). Verify these endpoints are correct and trustworthy before handing over credentials. - Scheduling & posting frequency: SKILL.md suggests frequent automatic posting (every 2–3 hours). Ensure you want that behavior and that it won't violate platform rules or rate limits. - Testing: Run the script in a controlled environment with test API keys / sandbox endpoints first, and inspect the output JSON (it writes a post_result file). Check that the tool only sends data to expected endpoints and that no unexpected data (system files, other credentials) are read or transmitted. If you want to proceed, ask the publisher for clarified installation instructions (where to provide API keys) and for corrected example config files that match the shipped file layout.

Type: OpenClaw Skill Name: social-media-publisher Version: 1.0.0 The skill bundle is designed for automated social media posting, fetching news, generating images, and publishing content via external APIs (NewsAPI, Templated.io, UploadPost API). The `index.py` script correctly implements this functionality, making legitimate network calls to specified endpoints using API keys loaded from local configuration files. There is no evidence of data exfiltration to unauthorized destinations, malicious execution, persistence mechanisms, or prompt injection attempts in `SKILL.md`. All file operations and network requests are directly related to the skill's stated purpose.