Substack

Publish, edit, and manage Substack posts for the Alternative Partners publication (alternativepartners.substack.com) via the internal REST API. Use this skil...

Do not install or enable this skill without validating the environment it expects. Key checks: 1) The SKILL.md expects local code (publishers/substack.py, publish_runner.py, research_gate.py) and a pipeline directory — confirm those files exist and inspect their source before use. 2) The skill needs a browser session cookie (named inconsistently as connect.sid / substack.sid) in SUBSTACK_SID; storing a long-lived session cookie in env/secrets is sensitive—consider using an official API token or OAuth if available. 3) The skill metadata does not declare required env vars or dependencies — ask the publisher to update metadata to list SUBSTACK_SID and any search API key, and provide the code or a clear install spec. 4) Verify the pipeline code does not change send_email behavior, exfiltrate content, or call unexpected external endpoints. If you control the AP content pipeline and the referenced modules are legitimate and auditable, this skill may be usable; if not, treat it as incomplete and potentially risky.

Type: OpenClaw Skill Name: substack Version: 1.0.0 The skill bundle provides instructions and code snippets for automating Substack post management via internal REST APIs using a session cookie (SUBSTACK_SID). While it requires handling sensitive credentials and utilizes shell commands (curl) for API interaction, the logic is transparent and strictly aligned with the stated purpose of managing the 'Alternative Partners' publication. No evidence of data exfiltration, malicious prompt injection, or unauthorized execution was found in SKILL.md or the metadata.