Skills ai-social-media-content

📦

ai-social-media-content

Name: ai-social-media-content
Author: inference-sh

Content revision r1 Critical ⚙️ External commands🌐 Network access

Create Social Media Assets with AI

Social teams need platform-ready visuals and copy quickly. This skill provides prompts and CLI workflows for videos, images, captions, hashtags, and repurposed posts.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Do not auto-install this skill.

The canonical policy requires operator review before any installation action.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "ai-social-media-content" from https://skillstore.io/skills/ai-social-media-content.md and its manifest at https://skillstore.io/api/skills/ai-social-media-content/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/ai-social-media-content.md Signed manifest GET /api/skills/ai-social-media-content/manifest Signed lockfile GET /api/skills/ai-social-media-content/lockfile

Test it

Using "ai-social-media-content". Request: Create a TikTok concept for a new coffee brand.

Expected outcome:

Vertical 9:16 video prompt with close-up coffee preparation and morning light.
Caption with a clear hook, product benefit, and call to action.
Hashtag set focused on coffee, mornings, small business, and lifestyle content.

Using "ai-social-media-content". Request: Repurpose a productivity tip across three platforms.

Expected outcome:

TikTok prompt using fast cuts and text overlays.
Twitter/X visual prompt for a square infographic.
YouTube thumbnail prompt with bold contrast and a simple headline area.

Using "ai-social-media-content". Request: Make a talking-head workflow for a 30-second tutorial.

Expected outcome:

Short script prompt with a hook, lesson, and closing action.
Voiceover guidance with a named voice option.
Avatar video prompt that combines the generated voice and selected image.

Security Audit

Critical

v4 • 7/6/2026 Open versioned report

The skill is primarily a Markdown guide for inference.sh social media workflows. Most shell-backtick detections are Markdown fence artifacts, but several examples do run third-party CLI commands. The remote curl-to-shell installer at SKILL.md line 21 is confirmed as a critical risk.

Files scanned

254

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Critical

SKILL.md:21

Pipe to shell pattern

curl -fsSL https://cli.inference.sh | sh && infsh login

The command pipes a remote installer directly into sh and then starts login. This can execute unreviewed code from the network in the user environment.

Capability review items (17)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

SKILL.md:20-27

Ruby/shell backtick execution

```bash

The code block documents a shell workflow that installs the inference.sh CLI and runs infsh commands. This is legitimate for the skill, but it still asks users or agents to execute third-party CLI commands.

Medium

SKILL.md:44-49

Ruby/shell backtick execution

```bash

The block contains infsh app run examples that call external inference providers. The arguments are mostly fixed examples, so the main risk is external execution and data egress, not shell injection.

Medium

SKILL.md:53-60

Ruby/shell backtick execution

```bash

The block contains a shell loop that calls infsh and writes carousel output files. The risk is controlled but real because it executes a third-party CLI and creates local files.

Medium

SKILL.md:64-69

Ruby/shell backtick execution

```bash

The block contains infsh app run examples that call external inference providers. The arguments are mostly fixed examples, so the main risk is external execution and data egress, not shell injection.

Medium

SKILL.md:73-84

Ruby/shell backtick execution

```bash

The block calls infsh for image generation and includes a Twitter/X posting command. This can create external side effects if credentials are configured, so the external command risk is real.

Medium

SKILL.md:88-105

Ruby/shell backtick execution

```bash

The workflow calls external model, text-to-speech, and avatar services through infsh. The commands are documented examples, but they can send script, image, and audio data to providers.

Medium

SKILL.md:111-115

Ruby/shell backtick execution

```bash

The block contains infsh app run examples that call external inference providers. The arguments are mostly fixed examples, so the main risk is external execution and data egress, not shell injection.

Medium

SKILL.md:119-123

Ruby/shell backtick execution

```bash

The block contains infsh app run examples that call external inference providers. The arguments are mostly fixed examples, so the main risk is external execution and data egress, not shell injection.

Medium

SKILL.md:127-131

Ruby/shell backtick execution

```bash

The block contains infsh app run examples that call external inference providers. The arguments are mostly fixed examples, so the main risk is external execution and data egress, not shell injection.

Medium

SKILL.md:135-139

Ruby/shell backtick execution

```bash

The block contains infsh app run examples that call external inference providers. The arguments are mostly fixed examples, so the main risk is external execution and data egress, not shell injection.

Medium

SKILL.md:143-147

Ruby/shell backtick execution

```bash

The block contains infsh app run examples that call external inference providers. The arguments are mostly fixed examples, so the main risk is external execution and data egress, not shell injection.

Medium

SKILL.md:151-156

Ruby/shell backtick execution

```bash

The block contains infsh app run examples that call external inference providers. The arguments are mostly fixed examples, so the main risk is external execution and data egress, not shell injection.

Medium

SKILL.md:160-164

Ruby/shell backtick execution

```bash

The block contains infsh app run examples that call external inference providers. The arguments are mostly fixed examples, so the main risk is external execution and data egress, not shell injection.

Medium

SKILL.md:170-188

Ruby/shell backtick execution

```bash

The block uses a shell variable to drive multiple infsh app runs for repurposing. No command injection is shown, but it is still real external CLI execution.

Medium

SKILL.md:192-201

Ruby/shell backtick execution

```bash

The batch workflow loops over topics and runs infsh for each item while writing output files. This is a legitimate workflow with real external command and local file effects.

Medium

SKILL.md:236-251

Ruby/shell backtick execution

```bash

The related-skills block uses npx skills add commands to install additional community skills. Installing code from a repository is a real external command risk and should require review.

Low

SKILL.md:21

Hardcoded URL

curl -fsSL https://cli.inference.sh | sh && infsh login

The URL is used in an installer command that downloads a remote script. This creates a real network dependency before local execution.

Detected Patterns

Pipe to shell pattern

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/ai-social-media-content/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/ai-social-media-content/security.svg)](https://skillstore.io/skills/ai-social-media-content?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/ai-social-media-content?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/ai-social-media-content/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/ai-social-media-content.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

inference-sh. (2026). ai-social-media-content security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/ai-social-media-content/audits/4

BibTeX citation

@techreport{inference-sh-ai-social-media-content-2026,
  author = {inference-sh},
  title = {ai-social-media-content security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/ai-social-media-content/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "ai-social-media-content security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "inference-sh"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/ai-social-media-content/audits/4"
identifiers:
  - type: other
    value: "skillstore:ai-social-media-content:audit:4"
    description: "Skillstore immutable audit report identifier"

Compare variants

2 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Higher Skillstore usage

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

inference-sh-9 Recommended

inference-sh-9-ai-social-media-content

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 24

Updated

2026-08-21

inference-sh Current

ai-social-media-content

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 14

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Launch Short-Form Campaigns

Create vertical video concepts and supporting captions for TikTok, Reels, and Shorts.

Batch Creator Assets

Produce weekly visuals, hooks, captions, and voiceover concepts from a topic list.

Prepare Product Visuals

Generate product showcase prompts, thumbnails, and shareable social graphics for launches.

Try These Prompts

Create One Short Video

Create one TikTok video concept for my topic. Include aspect ratio, duration, visual prompt, caption, and hashtags.

Build a Carousel Set

Create a five-slide Instagram carousel for this theme. Keep the visual style consistent and include captions for each slide.

Repurpose Across Platforms

Turn this concept into TikTok, Twitter/X, YouTube thumbnail, and Instagram feed assets. Explain the format choices for each platform.

Plan a Weekly Content Batch

Create a seven-day content batch for these topics. Include video prompts, captions, hashtags, and review notes for each post.

Best Practices

Review installer commands and CLI credentials before running any example.
Provide platform, aspect ratio, duration, audience, brand style, and review criteria.
Check generated assets for rights, accuracy, disclosure needs, and platform policy before publishing.

Avoid

Running remote installers or npx install commands without verification.
Publishing automated social posts without explicit human approval.
Using generic viral prompts without audience, brand, or policy constraints.

Frequently Asked Questions

Does this skill require inference.sh?

Yes. The workflows are written for the inference.sh CLI and its hosted model apps.

Can it create videos and images?

Yes. It provides CLI examples for video, image, thumbnail, avatar, and voice workflows.

Can it write captions and hashtags?

Yes. It includes prompt patterns for captions, hashtags, hooks, and calls to action.

Does it publish directly to social networks?

It includes a Twitter/X automation example, but publishing needs credentials and explicit approval.

Is the installer command safe to run automatically?

No. The remote pipe-to-shell installer should be replaced or manually verified before use.

Which AI tools can use this skill?

The report lists support for Claude, Codex, and Claude Code.

Developer Details

Author

inference-sh

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/inference-sh/skills/tree/main/skills/ai-social-media-content/

Ref

c1fdca50ff516318f65fed0d7f9e82797c5171dc

Maintenance freshness

7/20/2026

Usage

10 downloads · 267 views

File structure

📄 SKILL.md

ai-social-media-content

Install with my Agent

Agent-readable resources

Test it

Security Audit

Confirmed security concerns (1)

Risk Factors

Detected Patterns

Copy report link

Markdown badge

HTML badge

Embed card

APA citation

BibTeX citation

CITATION.cff

Compare variants

Skillstore Score

What You Can Build

Launch Short-Form Campaigns

Batch Creator Assets

Prepare Product Visuals

Try These Prompts

Best Practices

Avoid

Frequently Asked Questions

Developer Details