socialclaw

SUSPICIOUS. The stated purpose matches social publishing, but the footprint is high risk: a single third-party API key appears to broker posting across many platforms, routing credentials and content through an intermediary service rather than official platform auth flows. Installation is somewhat standard but includes transitive skill installation and a personal publisher identity. Not confirmed malware, but the credential concentration and public-posting capability make this a high-risk skill.