by 安全扫描
OpenClaw
安全
high confidenceThe skill's requirements and instructions are consistent with a LinkedIn posting helper; it asks for the LinkedIn channel config (access token & person URN) and otherwise contains no unexpected dependencies or installers.
评估建议
This skill appears to do what it says. Before installing, ensure you: (1) store a LinkedIn access token with the minimal required scope (w_member_social) in channels.linkedin and rotate it regularly; (2) understand that posting images may require the agent to read local files or fetch remote URLs — avoid giving it access to sensitive files you don't want uploaded; (3) confirm the agent will ask for owner approval before sending posts (the SKILL.md recommends confirmation but enforcement depends ...详细分析 ▾
✓ 用途与能力
Name/description match the actual requirements and behavior: the skill is an instruction-only LinkedIn poster and only requires a channels.linkedin config (accessToken and personUrn). There are no unrelated env vars or binaries requested.
ℹ 指令范围
SKILL.md restricts actions to composing posts and uploading images via the linkedin channel using the message tool. It explicitly allows local file paths, file:// URLs, and remote URLs for images — which is appropriate for image posting but means the agent will need to access local files or fetch remote content when asked. This is within scope but has expected privacy implications (local file access, network fetches).
✓ 安装机制
No install spec or code files are present (instruction-only), so nothing is written to disk or downloaded during install — lowest-risk installation profile.
✓ 凭证需求
The skill requires channels.linkedin config (accessToken with w_member_social and personUrn), which is proportional and necessary for posting. No unrelated credentials or broad environment access are requested.
✓ 持久化与权限
The skill is not always-on, does not request elevated platform privileges, and does not modify other skills or global agent settings. It relies on the platform's linkedin channel to perform actions.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/19
Text + image posting via native LinkedIn channel extension. Uses official UGC API — no cookies, no paid service.
● 无害
安装命令
点击复制官方npx clawhub@latest install linkedin-poster
镜像加速npx clawhub@latest install linkedin-poster --registry https://cn.longxiaskill.com