social-post Security Audit Report
social-post is an AI agent skill, created by callmedas69 and published at openclaw/skills. ClawSecure audited social-post across 10 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 75/100 (Medium Risk). The 5 findings concentrate in Tool Chaining Abuse, Unauthorized Tool Use and Permissions Manifest, including Skill code uses network libraries but doesn't declare network... and Detects suspicious tool chaining patterns that could lead to data.... None were rated high or critical severity.
Is social-post safe?
ClawSecure audited social-post and assigned a security score of 75/100 (Medium Risk), identifying 5 findings across Tool Chaining Abuse and Unauthorized Tool Use. Review the findings below before installing.
What did ClawSecure find in social-post?
ClawSecure identified 5 findings in social-post, concentrated in Tool Chaining Abuse, Unauthorized Tool Use and Permissions Manifest. The most severe include Skill code uses network libraries but doesn't declare network... and Detects suspicious tool chaining patterns that could lead to data....
How was social-post audited?
ClawSecure ran social-post through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 10 files from openclaw/skills.
What does a score of 75 mean?
ClawSecure assigned social-post a security score of 75/100, placing it in the Medium Risk range. This reflects 5 findings led by Tool Chaining Abuse that warrant review before production use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for social-post
ClawSecure detected 5 security findings in social-post, spanning Tool Chaining Abuse, Unauthorized Tool Use and Permissions Manifest.
- medium · Skill code uses network libraries but doesn't declare network.... Unauthorized Tool Use finding.
- medium · Detects suspicious tool chaining patterns that could lead to data.... Tool Chaining Abuse finding detected in
lib/twitter.sh:18. - medium · Detects suspicious tool chaining patterns that could lead to data.... Tool Chaining Abuse finding detected in
lib/twitter.sh:70. - medium · Detects suspicious tool chaining patterns that could lead to data.... Tool Chaining Abuse finding detected in
lib/twitter.sh:128. - medium · Missing config.json - agent may not be properly configured. Permissions Manifest finding.
Each finding is expandable in the interactive list below.
3-Layer Audit Protocol
Security Recommendations for social-post
Add a config.json permissions manifest
Pin dependencies to exact versions
1.2.3 instead of ^1.2.3) to keep unauthorized code out of your dependency tree. ClawSecure checks every dependency against known CVE databases.Related Security Research
How to Secure an MCP Server: The 2026 Guide→What Is MCP Security? Model Context Protocol Explained→AI Agent Security: The Complete 2026 Guide→Related AI Agent Security Audits
Scanned on February 7, 2026. social-post is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.