Content Gen

Generate social media content pack from PRD — LinkedIn post, Reddit answer draft, and Twitter/X thread. Use when user says "create content", "write LinkedIn...

This skill appears coherent for generating social media copy from a project's documentation. Before installing/using it: (1) be aware it will read the project path you provide (including code and docs) — avoid pointing it at repos that contain secrets or private metrics you don't want exposed in generated drafts; (2) it will write docs/content-pack.md and may overwrite existing content — back up any important files first; (3) if the MCP helper tools (project_code_search, kb_search) are available in your agent environment, confirm they don't route sensitive data to external services you don't trust; (4) always review and sanitize generated posts (especially metrics, URLs, or claims) before publishing. If you need a stricter scope, consider running it on a sanitized copy of your repo or removing the project_code_search helper from available tools.

Type: OpenClaw Skill Name: solo-content-gen Version: 1.1.1 The skill allows the AI agent to read arbitrary file paths provided by the user via the `$ARGUMENTS` variable, as indicated by the instruction "If path: read directly" in SKILL.md. While this capability might be intended for reading project documentation from non-standard locations, it creates an arbitrary file read vulnerability, allowing an attacker to potentially instruct the agent to read sensitive files on the system. There are no explicit instructions for data exfiltration or malicious execution, but the ability to read arbitrary files is a significant security risk, classifying it as suspicious rather than benign.