Skip to main content

farcaster-agent

Automates the creation and management of Farcaster accounts, enabling users to post casts and set up profiles autonomously.

Install this skill

or
86/100

Security score

The farcaster-agent skill was audited on Feb 21, 2026 and we found 10 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 62

Access to hidden dotfiles in home directory

SourceSKILL.md
62- `~/.openclaw/farcaster-credentials.json` (if OpenClaw is installed)
low line 104

External URL reference

SourceSKILL.md
104console.log('Cast URL: https://farcaster.xyz/~/conversations/' + hash);
low line 120

External URL reference

SourceSKILL.md
120PRIVATE_KEY=0x... SIGNER_PRIVATE_KEY=... FID=123 npm run profile myusername "Display Name" "My bio" "https://example.com/pfp.png"
low line 135

External URL reference

SourceSKILL.md
135pfpUrl: 'https://api.dicebear.com/7.x/bottts/png?seed=myagent'
low line 150

External URL reference

SourceSKILL.md
150- **DiceBear** (generated avatars): `https://api.dicebear.com/7.x/bottts/png?seed=yourname`
low line 168

External URL reference

SourceSKILL.md
168### Neynar Hub API (`https://hub-api.neynar.com`)
low line 175

External URL reference

SourceSKILL.md
175### Neynar REST API (`https://api.neynar.com`)
low line 180

External URL reference

SourceSKILL.md
180### Farcaster Fname Registry (`https://fnames.farcaster.xyz`)
low line 289

External URL reference

SourceSKILL.md
289pfpUrl: 'https://api.dicebear.com/7.x/bottts/png?seed=myagent'
low line 292

External URL reference

SourceSKILL.md
292console.log('Profile: https://farcaster.xyz/myagent');
Scanned on Feb 21, 2026
View Security Dashboard