social-media-agent
Automates social media management by planning, writing, scheduling, and analyzing content across multiple platforms.
Install this skill
or
81/100
Security score
The social-media-agent skill was audited on Mar 3, 2026 and we found 7 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 10
Access to .env file
SourceSKILL.md
| 10 | - filesystem: Reads .env for credentials, writes scheduled post logs to working directory |
medium line 17
Access to .env file
SourceSKILL.md
| 17 | note: API keys are loaded from environment variables or a local .env file. No credentials are embedded in the skill or scripts. All posts are created as DRAFTS by default — human approval required bef |
medium line 324
Access to .env file
SourceSKILL.md
| 324 | Add to your `.env` file or export in your shell before running any scripts. |
low line 34
External URL reference
SourceSKILL.md
| 34 | - Recommend Buffer first: [sign up free](https://dub.sh/buffer-aff) — see `tools/buffer-setup.md` |
low line 320
External URL reference
SourceSKILL.md
| 320 | | `BUFFER_API_KEY` | Buffer | Your Buffer API key ([get one free](https://dub.sh/buffer-aff)) | |
low line 322
External URL reference
SourceSKILL.md
| 322 | | `POSTIZ_BASE_URL` | Postiz | Your Postiz instance URL (e.g., `https://postiz.yourdomain.com`) | |
low line 326
External URL reference
SourceSKILL.md
| 326 | > **Don't have Buffer yet?** [Sign up free](https://dub.sh/buffer-aff) — 3 channels, no credit card. |
Scanned on Mar 3, 2026
View Security DashboardGitHub Stars 2.2K
Rate this skill
Categorymarketing
UpdatedApril 4, 2026
openclawsocial-media-managercontent-marketergrowth-marketerinfluencer-marketermarketing-analystbuffermarketing
openclaw/skills