openclaw-marketing-skills

SUSPICIOUS: the skill’s overall purpose and requested marketing-platform credentials are mostly aligned, and there is no direct evidence of credential theft or malicious exfiltration. However, inconsistent publisher identity, nonstandard install guidance, and explicit installation of a third-party TweetClaw plugin that may receive API credentials create meaningful supply-chain and credential-forwarding risk.