Turn 1–9 images into platform-specific captions + mood-matched music hints, then route to mock/dry-run/real publishers with publish logs.

This bundle is primarily a prompt + template library for generating platform-specific captions and music hints; that part appears coherent. However, the skill also claims to route to 'mock/dry_run/real' publishers and instructs running Redis/FastAPI/worker but includes no code, install steps, or any declared API credentials. Before installing or running with real accounts: 1) ask the publisher for the source repository or implementation that performs publishing and review that code; 2) do not provide platform API tokens or OAuth secrets until you can inspect where they will be stored and used; 3) if you only need caption/music generation, use the prompts in a local, read-only way (no credentials); 4) if you plan to run the 'real' publisher, require a clear install spec, explicit required env vars, and a security review of any service that will hold credentials. Providing those items (repo/install/code and justified env vars) would increase confidence that the skill is safe to use as advertised.

Type: OpenClaw Skill Name: distribution-agent-publisher-pack Version: 1.0.0 The skill bundle is benign. All files (SKILL.md, PROMPTS.md, TEMPLATES.md) consistently describe a content generation and distribution task. There is no evidence of data exfiltration, malicious execution, persistence, or obfuscation. Notably, PROMPTS.md includes 'Hard rules' for the LLM to 'Do not include token/keys' and SKILL.md advises using environment variables for secrets and starting in 'mock' or 'dry_run' mode, indicating good security practices rather than malicious intent.