Skip to main content

postnitro-carousel

Generates professional social media carousel posts using the PostNitro.ai Embed API for platforms like LinkedIn and Instagram.

Install this skill

or
70/100

Security score

The postnitro-carousel skill was audited on May 15, 2026 and we found 14 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 35

Curl to non-GitHub URL

SourceSKILL.md
35curl -X POST 'https://embed-api.postnitro.ai/post/initiate/generate' \
medium line 64

Curl to non-GitHub URL

SourceSKILL.md
64curl -X POST 'https://embed-api.postnitro.ai/post/initiate/import' \
medium line 95

Curl to non-GitHub URL

SourceSKILL.md
95curl -X GET "https://embed-api.postnitro.ai/post/status/$EMBED_POST_ID" \
medium line 104

Curl to non-GitHub URL

SourceSKILL.md
104curl -X GET "https://embed-api.postnitro.ai/post/output/$EMBED_POST_ID" \
low line 4

External URL reference

SourceSKILL.md
4homepage: https://postnitro.ai
low line 14

External URL reference

SourceSKILL.md
141. Sign up at https://postnitro.ai (free plan: 5 credits/month)
low line 25

External URL reference

SourceSKILL.md
25Base URL: `https://embed-api.postnitro.ai`
low line 35

External URL reference

SourceSKILL.md
35curl -X POST 'https://embed-api.postnitro.ai/post/initiate/generate' \
low line 64

External URL reference

SourceSKILL.md
64curl -X POST 'https://embed-api.postnitro.ai/post/initiate/import' \
low line 95

External URL reference

SourceSKILL.md
95curl -X GET "https://embed-api.postnitro.ai/post/status/$EMBED_POST_ID" \
low line 104

External URL reference

SourceSKILL.md
104curl -X GET "https://embed-api.postnitro.ai/post/output/$EMBED_POST_ID" \
low line 138

External URL reference

SourceSKILL.md
138"context": "https://yourblog.com/posts/social-media-strategy-2026",
low line 152

External URL reference

SourceSKILL.md
152"context": "https://x.com/username/status/1234567890",
low line 177

External URL reference

SourceSKILL.md
1775. **X type needs an X post URL** — `"x"` type expects `https://x.com/...` or `https://twitter.com/...` as `context`.
Scanned on May 15, 2026
View Security Dashboard
Installation guide →