socialclaw-96d0b7 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited socialclaw-96d0b7 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Schedule and publish social media posts through connected accounts using the hosted SocialClaw API. SocialClaw handles each network's OAuth, media rules, and publish logic, so this skill only needs a workspace API key.
X, LinkedIn (profile + page), Instagram (business + standalone), Facebook Pages, TikTok, YouTube, Reddit, Pinterest, WordPress, Discord, and Telegram.
All requests go to https://getsocialclaw.com and send the workspace key:
Authorization: Bearer $SOCIALCLAW_API_KEYNever hardcode the key — read it from the SOCIALCLAW_API_KEY environment variable.
GET /v1/accountsGET /v1/accounts/{accountId}/capabilitiesPOST /v1/assets/upload with { filename, contentType, contentBase64 } → returns a hosted URL to use as media_linkPOST /v1/posts/validate with { schedule }POST /v1/posts/apply with { schedule }. Omit publish_at to publish immediately.GET /v1/posts/{postId}/attempts{
"timezone": "UTC",
"posts": [
{
"account": "<accountId>",
"name": "launch post",
"description": "<the post text>",
"publish_at": "2026-06-16T09:00:00Z",
"media_link": "<optional hosted media URL>"
}
]
}List connected accounts:
curl -s https://getsocialclaw.com/v1/accounts \
-H "Authorization: Bearer $SOCIALCLAW_API_KEY"Validate, then schedule a post:
PAYLOAD='{"schedule":{"timezone":"UTC","posts":[{"account":"ACCOUNT_ID","name":"launch","description":"Hello from Hermes 🦅","publish_at":"2026-06-16T09:00:00Z"}]}}'
curl -s -X POST https://getsocialclaw.com/v1/posts/validate \
-H "Authorization: Bearer $SOCIALCLAW_API_KEY" -H "Content-Type: application/json" -d "$PAYLOAD"
curl -s -X POST https://getsocialclaw.com/v1/posts/apply \
-H "Authorization: Bearer $SOCIALCLAW_API_KEY" -H "Content-Type: application/json" -d "$PAYLOAD"SocialClaw also exposes the same capabilities as tools:
https://getsocialclaw.com/mcp with Authorization: Bearer $SOCIALCLAW_API_KEY.npx -y socialclaw mcp (stdio MCP), or the socialclaw CLI after socialclaw login.https://getsocialclaw.com — SocialClaw REST API and hosted MCP. This is the only host contacted.validate before apply to catch provider-rule and media issues early.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.