41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill mostly matches a Postiz API client, but it includes hard-coded example credentials, doesn't declare required credentials, and allows the model to call external APIs — these mismatches warran...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770304498894,
        "_id": "k974kcds6w9k826jhzy5kma6h980kmcj",
        "changelog": "Full Postiz API: multi-platform posting, thread creation, media upload, slot finder, deduplication, platform-specific limits",
        "changelogSource": "user",
        "createdAt": 1770304498894,
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "coolmanns",
        "handle": "coolmanns",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/117685070?v=4",
        "kind": "user",
        "linkedUserId": "kn75n276gvydzhf7bptgdx09vx7zw0c8"
    },
    "ownerHandle": "coolmanns",
    "skill": {
        "_creationTime": 1770264255616,
        "_id": "kd7ffy74rvjdmxtya07z07zyax80jcay",
        "badges": [],
        "canonicalSkillId": "kd70wc3aaya7re6g01cpj8wx9x7zy7th",
        "createdAt": 1770264255616,
        "displayName": "Postiz Extended",
        "forkOf": {
            "at": 1770264255616,
            "kind": "duplicate",
            "skillId": "kd77jxmj8tkybf34p40v3619as80jbwv"
        },
        "latestVersionId": "k974kcds6w9k826jhzy5kma6h980kmcj",
        "ownerUserId": "kn75n276gvydzhf7bptgdx09vx7zw0c8",
        "slug": "postiz-ext",
        "stats": {
            "comments": 0,
            "downloads": 1240,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 2,
            "versions": 2
        },
        "summary": "Schedule and manage social media posts via Postiz API (self-hosted or cloud).\nDirect API integration — no n8n dependency.\nSupports X\/Twitter, LinkedIn, Bluesky with platform-specific character limits.\nIncludes deduplication, scheduling, media upload, and thread creation.\n\nWHAT IT CAN DO:\n- Schedule posts to 28+ channels (X, LinkedIn, Bluesky, Reddit, Instagram, Facebook, Threads, YouTube, TikTok, Pinterest, Mastodon, and more)\n- Multi-platform posting in a single API call with platform-adapted content\n- X\/Twitter thread creation for longer content\n- Media upload (file and URL)\n- Find next available posting slot per channel\n- List, query, update, and delete scheduled posts\n- Deduplication workflow (check existing before posting)\n- Platform-specific character limits and content tone guidance\n- Post state management (QUEUE, PUBLISHED, ERROR, DRAFT)\n- Helper script for quick posting with auto-validation\n\nUSE WHEN: scheduling social media posts, creating multi-platform content, managing a posting calendar, uploading media for social posts, checking post status, creating X\/Twitter threads, or automating social media workflows.",
        "tags": {
            "latest": "k974kcds6w9k826jhzy5kma6h980kmcj",
            "postiz": "k974dcgf5j3yn3dhwh1q9st8y980kqya",
            "social-media": "k974dcgf5j3yn3dhwh1q9st8y980kqya"
        },
        "updatedAt": 1774322675496
    }
}