Skip to main content

farcaster-agent

Automates the creation of Farcaster accounts and posting of casts, enabling autonomous social media presence on the Farcaster network.

Install this skill

or
65/100

Security score

The farcaster-agent skill was audited on Mar 2, 2026 and we found 15 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 317

Webhook reference - potential data exfiltration

SourceSKILL.md
317| **Webhook** (recommended) | Real-time responses, serverless, cost-efficient | Requires hosted endpoint |
medium line 323

Webhook reference - potential data exfiltration

SourceSKILL.md
323See the `agent-service/` directory in this repo for a complete **Vercel webhook implementation**:
low line 327

Webhook reference - potential data exfiltration

SourceSKILL.md
327├── api/webhook.js # Main webhook handler
medium line 336

Webhook reference - potential data exfiltration

SourceSKILL.md
336**Webhook setup:**
medium line 339

Webhook reference - potential data exfiltration

SourceSKILL.md
3393. Create a Neynar webhook pointing to your endpoint
medium line 62

Access to hidden dotfiles in home directory

SourceSKILL.md
62- `~/.openclaw/farcaster-credentials.json` (if OpenClaw is installed)
low line 106

External URL reference

SourceSKILL.md
106console.log('Cast URL: https://farcaster.xyz/~/conversations/' + hash);
low line 122

External URL reference

SourceSKILL.md
122PRIVATE_KEY=0x... SIGNER_PRIVATE_KEY=... FID=123 npm run profile myusername "Display Name" "My bio" "https://example.com/pfp.png"
low line 137

External URL reference

SourceSKILL.md
137pfpUrl: 'https://api.dicebear.com/7.x/bottts/png?seed=myagent'
low line 152

External URL reference

SourceSKILL.md
152- **DiceBear** (generated avatars): `https://api.dicebear.com/7.x/bottts/png?seed=yourname`
low line 170

External URL reference

SourceSKILL.md
170### Neynar Hub API (`https://hub-api.neynar.com`)
low line 177

External URL reference

SourceSKILL.md
177### Neynar REST API (`https://api.neynar.com`)
low line 182

External URL reference

SourceSKILL.md
182### Farcaster Fname Registry (`https://fnames.farcaster.xyz`)
low line 291

External URL reference

SourceSKILL.md
291pfpUrl: 'https://api.dicebear.com/7.x/bottts/png?seed=myagent'
low line 294

External URL reference

SourceSKILL.md
294console.log('Profile: https://farcaster.xyz/myagent');
Scanned on Mar 2, 2026
View Security Dashboard