Social Reply Bot

Reddit & X/Twitter auto-reply bot for ecommerce/SaaS growth. Finds relevant posts about AI customer service, Amazon FBA, Shopify — posts genuine AI-generated...

Key things to check before installing: - The registry metadata omits requirements the code needs (it uses ANTHROPIC_API_KEY and the 'browse' CLI). Treat SKILL.md/README as authoritative and double-check they match what the installer will do. - Do NOT run curl ... | bash without inspection. Download install.sh and setup.sh from the repo and read them locally (or run them in an isolated VM/container) before executing. - The tool requires you to log into Reddit/X in an automated browser session; that gives the software the ability to post using your accounts. This can lead to account suspension if behavior violates platform policies. Consider using throwaway/test accounts first. - The installer registers a macOS LaunchAgent (persistent scheduled runs) and creates files under your home directory — if you don’t want persistent background jobs, skip the installer and run the code manually in a controlled environment. - The code contains hard-coded checks/strings (e.g., account names like 'mguozhen', 'VocAiSage', 'Hunter Guo') that indicate it was tailored to the author’s accounts; expect to review and adapt code before using it with your accounts. - Limit the Anthropic API key you use (billing/permissions) and monitor usage. If possible create a dedicated key with strict limits. - If you lack confidence auditing the install scripts or the code, run the project in an isolated VM or container (or avoid installing) and/or ask the author to provide a reproducible install manifest and to fix the registry metadata mismatches.

Type: OpenClaw Skill Name: social-reply-bot Version: 1.2.0 The bundle implements a social media automation bot with several high-risk behaviors and security vulnerabilities. Most critically, `bot/browser.py` contains a shell injection vulnerability where it executes commands via `subprocess.run(shell=True)` using unsanitized string interpolation in functions like `type_text`. The installation scripts (`install.sh` and `setup.sh`) establish persistence on macOS by creating a `LaunchAgent` and insecurely store the `ANTHROPIC_API_KEY` in a local plist file. Additionally, the `SKILL.md` file contains instructions for the AI agent to execute a remote script via `curl | bash` (from `raw.githubusercontent.com`), which is a high-risk pattern for remote code execution and prompt injection.