socialclaw-8e4da3 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited socialclaw-8e4da3 (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
SocialClaw is a workspace-scoped social publishing service at https://getsocialclaw.com.
This skill is an instruction layer for the hosted SocialClaw service.
It does not contain the SocialClaw backend or the provider integrations themselves. It teaches Codex how to:
socialclaw CLI if it is already installedThis skill can work without the CLI. The CLI is only an optional client for the same hosted service.
Use this skill when the user wants to:
Do not use this skill for editing the SocialClaw codebase itself. This bundle is for operating a deployed SocialClaw workspace.
https://getsocialclaw.comAuthorization: Bearer <key>socialclaw CLI when installedSC_API_KEYhttps://getsocialclaw.comsocialclaw or social if already installedSocialClaw also has a separate npm CLI package named socialclaw.
Prefer it when it is already installed or the user wants command-line examples. The CLI is a client for the hosted SocialClaw service. It can:
socialclaw install --claudeIf the user explicitly wants the CLI and it is not installed yet:
npm install -g socialclawFor command details, read references/cli.md.
If the user does not have a workspace API key yet:
open https://getsocialclaw.com/dashboardThen tell them:
Set:
export SC_API_KEY="<workspace-key>"If the CLI is installed, log in with it:
socialclaw login --api-key <workspace-key>Otherwise validate the key over HTTP:
curl -sS \
-H "Authorization: Bearer $SC_API_KEY" \
"https://getsocialclaw.com/v1/keys/validate"If execution fails with plan_required, subscription_inactive, subscription_past_due, subscription_paused, or subscription_canceled, direct the user to:
https://getsocialclaw.com/pricinghttps://getsocialclaw.com/dashboardhttps://getsocialclaw.com/dashboard to sign in with Google and create one.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.