social-publisher

SUSPICIOUS. The core SocialClaw workflow is mostly coherent and uses an official-looking npm package and official API domain, but the skill enables real-world autonomous public posting and also recommends a transitive third-party plugin that broadens trust and data flows beyond the core service. Main concern is operational risk and expanded trust, not confirmed malware.