SocialPost Auto

社交媒体自动化运营助手。自动生成并发布小红书、微博、Twitter 内容，定时发送、互动回复。

Do not supply platform credentials or a 'license_key' until the developer clarifies how the code uses them. Specific concerns to address before installing: (1) Ask the author why the registry lists no required credentials but SKILL.md instructs you to add them; (2) Verify whether post.py actually performs authenticated HTTP calls to platform APIs (the current functions only print); (3) Confirm which dependencies are required (post.py imports requests) and whether the package.json Node file is accidental; (4) If you must test, run the code in an isolated environment (container or VM) without real credentials and inspect network activity; (5) Prefer only adding minimal-scoped tokens or per-account API keys and revoke them after testing. Because of the mismatches between documentation, manifest, and code, treat this skill as untrusted until the developer provides a clear, consistent explanation and a version that actually implements secure credential handling.

Type: OpenClaw Skill Name: socialpost-auto Version: 1.0.0 The skill bundle is a social media automation tool designed to schedule and publish content to platforms like Twitter, Weibo, and Xiaohongshu. The core logic in `scripts/post.py` manages a local task queue in a JSON file and provides placeholders for platform API integrations. While the tool requires sensitive credentials (API keys and session cookies) to be stored in the OpenClaw configuration file, there is no evidence of data exfiltration, unauthorized execution, or malicious prompt injection in `SKILL.md` or the Python scripts.