social-publisher
Warn
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install a globally scoped Node.js package (
socialclaw@0.1.12) from the public npm registry. - [COMMAND_EXECUTION]: The skill utilizes several CLI tools including
curlfor API key validation and thesocialclawcommand-line interface for managing social media accounts, uploading media assets, and publishing content. - [DATA_EXFILTRATION]: The skill transmits post content, media files, and a workspace API key to the external domain
getsocialclaw.com. Although this is the intended functionality of the skill, it involves sending user-generated data and credentials to a third-party service.
Audit Metadata