Skills twitter-automation
๐Ÿ“ฆ

twitter-automation

Content revision r1 Medium Risk โš™๏ธ External commands๐ŸŒ Network access

Automate Twitter/X Publishing and Engagement

Managing Twitter/X publishing and engagement can require repetitive manual work. This skill provides belt CLI workflows for posts, media, likes, reposts, messages, follows, and lookups.

Supports: Claude Codex Code(CC)
โš ๏ธ 50 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "twitter-automation" from https://skillstore.io/skills/101-skills-twitter-automation.md and its manifest at https://skillstore.io/api/skills/101-skills-twitter-automation/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "twitter-automation". Draft a product update for developers and show it before publishing.

Expected outcome:

Draft: Version 2.4 is available with faster imports and clearer validation messages. Approval required before publishing to the connected account.

Using "twitter-automation". Prepare a media post using the launch image, then request confirmation.

Expected outcome:

  • Media URL is present and ready for review.
  • Post text: Our latest release is now available.
  • No account action was taken. Confirm to publish.

Using "twitter-automation". Review tweet 1234567890 before preparing a repost.

Expected outcome:

The tweet details were retrieved for review. No repost occurred because explicit confirmation is still required.

Security Audit

Medium Risk
v5 โ€ข 7/12/2026 Open versioned report

The skill intentionally runs belt and npx commands, including authenticated Twitter/X actions and third-party skill installation. Markdown formatting and ordinary documentation links are false positives, but the remote image, unpinned installs, and missing action confirmations remain real risks.

1
Files scanned
158
Lines analyzed
15
Review items
0
False positives ignored

Confirmed security concerns (2)

Medium
Account-changing actions lack confirmation safeguards
The skill directly instructs posting, liking, reposting, messaging, following, and deleting without requiring a preview or explicit confirmation before each action.
The cited command examples perform externally visible or destructive account actions, and no approval step appears in the skill.
Medium
Unpinned third-party skill installation
The skill recommends npx installations from repository names without a commit or immutable version, allowing future upstream changes to alter installed instructions.
The installation commands name repositories or skill aliases without immutable revisions. This creates a clear dependency integrity risk.
Capability review items (15)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Ruby/shell backtick execution
> **Install the belt CLI skill:** `npx skills add belt-sh/cli`
The line instructs users to run npx to download and install a third-party CLI skill. This is real external command execution with supply-chain exposure.
Medium
Ruby/shell backtick execution
```bash
The fenced block runs belt login and an authenticated Twitter/X posting command. These are intentional external commands with account and network side effects.
Medium
Ruby/shell backtick execution
```bash
The fenced block runs belt to publish a tweet through the connected account. Posting is an authenticated external side effect.
Medium
Ruby/shell backtick execution
```bash
The block runs belt commands, saves a sample input file, and creates a media post. It performs local file and authenticated external operations.
Medium
Ruby/shell backtick execution
```bash
The block runs belt to like a specified tweet. This changes the connected account through an external service.
Medium
Ruby/shell backtick execution
```bash
The block runs belt to repost a specified tweet. This is an authenticated external account action.
Medium
Ruby/shell backtick execution
```bash
The block runs belt to send a direct message to a recipient. This creates an externally visible communication from the connected account.
Medium
Ruby/shell backtick execution
```bash
The block runs belt to follow a named user. This changes the connected account and creates an external side effect.
Medium
Ruby/shell backtick execution
```bash
The block invokes the external belt CLI to retrieve an X profile. The action is read-only, but it still performs an authenticated network operation.
Medium
Ruby/shell backtick execution
```bash
The block invokes the external belt CLI to retrieve tweet details. The action is read-only, but it still performs a network operation.
Medium
Ruby/shell backtick execution
```bash
The block runs belt to delete a specified tweet. Deletion is an authenticated and destructive external account action.
Medium
Ruby/shell backtick execution
```bash
The workflow executes one app to generate media, writes its response to a file, then executes another app to publish the result.
Medium
Ruby/shell backtick execution
```bash
The workflow executes one app to generate video, writes its response to a file, then executes another app to publish the result.
Medium
Ruby/shell backtick execution
```bash
The block instructs users to run several npx commands that install third-party skills. These commands download and execute package tooling from mutable sources.
Low
Hardcoded URL
![Twitter/X Automation](https://cloud.inference.sh/app/files/u/4mg21r6ta37mpaz6ktzwtt8krr/01kgad3pxs
The Markdown image loads from cloud.inference.sh when rendered. This creates a third-party request that can disclose reader network metadata.
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/101-skills-twitter-automation/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/101-skills-twitter-automation/security.svg)](https://skillstore.io/skills/101-skills-twitter-automation?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/101-skills-twitter-automation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/101-skills-twitter-automation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/101-skills-twitter-automation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

101-skills. (2026). twitter-automation security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/101-skills-twitter-automation/audits/5

BibTeX citation

@techreport{101-skills-101-skills-twitter-automation-2026, author = {101-skills}, title = {twitter-automation security audit report (audit version 5)}, institution = {Skillstore}, year = {2026}, number = {5}, url = {https://skillstore.io/skills/101-skills-twitter-automation/audits/5}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "twitter-automation security audit report (audit version 5)" version: "unspecified" type: report authors: - name: "101-skills" date-released: "2026-07-12" url: "https://skillstore.io/skills/101-skills-twitter-automation/audits/5" identifiers: - type: other value: "skillstore:101-skills-twitter-automation:audit:5" description: "Skillstore immutable audit report identifier"

Compare variants

16 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score
sickn33 Recommended

sickn33-twitter-automation

Skillstore Score 70
Evidence Confidence High
Skillstore usage 7
Updated

2026-08-21

inferen-sh-twitter-automation

Skillstore Score 69
Evidence Confidence High
Skillstore usage 8
Updated

2026-08-21

skillssh-twitter-automation

Skillstore Score 50
Evidence Confidence High
Skillstore usage 8
Updated

2026-08-21

infsh-skills-twitter-automation

Skillstore Score 50
Evidence Confidence High
Skillstore usage 7
Updated

2026-08-21

skills-shell-twitter-automation

Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 5
Updated

2026-08-21

101-skills Current

101-skills-twitter-automation

Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 5
Updated

2026-08-21

qu-skills-twitter-automation

Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 4
Updated

2026-08-21

tul-sh-twitter-automation

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 11
Updated

2026-08-21

toolshell-twitter-automation

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 11
Updated

2026-08-21

inference-sh-twitter-automation

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 9
Updated

2026-08-21

inference-shell-twitter-automation

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 9
Updated

2026-08-21

halt-catch-fire-twitter-automation

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 9
Updated

2026-08-21

inference-sh-8-twitter-automation

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 8
Updated

2026-08-21

inference-skills-twitter-automation

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 5
Updated

2026-08-21

inference-sh-skills-twitter-automation

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 5
Updated

2026-08-21

inference-sh-9-twitter-automation

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 4
Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
65
Community
83
Spec Compliance

What You Can Build

Publish campaign updates

Prepare and publish approved text or media posts for a managed brand account.

Test X integrations

Exercise posting, lookup, and engagement operations while developing an automated workflow.

Share generated media

Generate an image or video with inference.sh and publish the resulting media URL.

Try These Prompts

Draft a text post
Draft one Twitter/X post about [topic] for [audience]. Keep it under [limit] characters and show the final text before publishing.
Prepare a media post
Prepare a Twitter/X post using [media URL] and this message: [text]. Validate the inputs and request confirmation before publishing.
Review an engagement action
Prepare to [like or repost] tweet [tweet ID]. Retrieve its details, summarize the target, and ask for confirmation before changing the account.
Build an approved publishing workflow
Generate [image or video] for [campaign], extract its media URL, and draft the post. Stop for approval before every external account action.

Best Practices

  • Preview final text, recipients, usernames, tweet identifiers, and media before any account-changing action.
  • Use approved content and follow Twitter/X automation, consent, and rate-limit policies.
  • Pin installed dependencies and verify the connected account before running commands.

Avoid

  • Do not automate unsolicited direct messages, mass follows, likes, or reposts.
  • Do not publish or delete content without explicit confirmation from the account owner.
  • Do not place credentials, private data, or confidential URLs in post inputs.

Frequently Asked Questions

What setup is required?
Install the belt CLI, authenticate it, and configure the inference.sh Twitter/X integration for the intended account.
Can this skill schedule posts?
No scheduling command is documented. An external scheduler must invoke an approved publishing workflow at the required time.
Can it publish images and videos?
Yes. The media must be available through a usable URL accepted by the x/post-create app.
Does it support account engagement?
Yes. It documents likes, reposts, direct messages, follows, post deletion, and profile or post lookups.
Does it ask before posting?
The original instructions do not require confirmation. Users should require a preview and explicit approval before every account-changing command.
Are API limits handled automatically?
No rate-limit handling is documented. Users must follow Twitter/X limits, automation rules, and applicable consent requirements.

Developer Details

Author

101-skills

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Ref

d71c7417a35d5c2624161bd2fe8de8a41a362128

Maintenance freshness

7/18/2026

Usage

1 downloads ยท 0 views

File structure

๐Ÿ“„ SKILL.md

More from 101-skills

View all
View all