Skills twitter-automation

📦

twitter-automation

Name: twitter-automation
Author: skills-shell

Content revision r1 Medium Risk ⚙️ External commands🌐 Network access

Automate Twitter/X Account Actions

Teams need repeatable Twitter/X actions without manual API work. This skill provides belt CLI workflows for posts, media, engagement, messages, follows, and profile lookup.

Supports: Claude Codex Code(CC)

⚠️ 50 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "twitter-automation" from https://skillstore.io/skills/skills-shell-twitter-automation.md and its manifest at https://skillstore.io/api/skills/skills-shell-twitter-automation/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/skills-shell-twitter-automation.md Signed manifest GET /api/skills/skills-shell-twitter-automation/manifest Signed lockfile GET /api/skills/skills-shell-twitter-automation/lockfile

Test it

Using "twitter-automation". Post a launch update about a new analytics feature.

Expected outcome:

A short post draft, an account confirmation request, and the action needed to publish after approval.

Using "twitter-automation". Create a media post for this approved image URL.

Expected outcome:

A proposed post caption, a media URL check, and a reminder that publishing changes the connected account.

Using "twitter-automation". Follow this user and send a thank-you message.

Expected outcome:

A consent and policy check, a confirmation request, and separate steps for the follow and message actions.

Security Audit

Medium Risk

v5 • 7/7/2026 Open versioned report

Most static findings are Markdown code spans or code fences, but several documented commands invoke the belt CLI, npx, or remote assets. No prompt injection text was found; the main risks are broad belt command permission and account-mutating Twitter/X automation.

Files scanned

158

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (2)

Medium

SKILL.md:4 SKILL.md:150

Broad Belt CLI Permission Scope

The skill grants Bash access for all belt commands, while the content also encourages browsing the wider app store. This permission is broader than the listed Twitter/X workflows.

The allowed-tools entry permits any belt subcommand, and the skill explicitly references the app store. This creates a clear overbroad permission concern.

Medium

SKILL.md:31-38 SKILL.md:75-87 SKILL.md:102-105

Account-Mutating Social Automation

The skill supports posting, likes, retweets, direct messages, follows, and deletion. These actions can affect a connected account and can be abused for spam or unauthorized outreach.

The documented app list and examples directly include account-changing actions. The risk is contextual business-logic abuse rather than a syntax pattern.

Capability review items (17)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

SKILL.md:7

Ruby/shell backtick execution

> **Install the belt CLI skill:** `npx skills add belt-sh/cli`

The line instructs users to install an external CLI skill through npx. That can fetch community code and is a supply-chain command execution risk.

Medium

SKILL.md:19-24

Ruby/shell backtick execution

```bash

The reported block includes belt login and a command to publish a tweet. It invokes a networked CLI with authenticated account side effects.

Medium

SKILL.md:45-47

Ruby/shell backtick execution

```bash

The reported block contains a belt command that publishes a tweet. This is an authenticated external account mutation.

Medium

SKILL.md:51-61

Ruby/shell backtick execution

```bash

The reported block creates sample input and publishes media through belt. It combines local file handling with an external posting action.

Medium

SKILL.md:65-67

Ruby/shell backtick execution

```bash

The reported block uses belt to like a tweet. This changes the connected Twitter/X account state through an external service.

Medium

SKILL.md:71-73

Ruby/shell backtick execution

```bash

The reported block uses belt to retweet a post. This performs an authenticated social account action.

Medium

SKILL.md:77-82

Ruby/shell backtick execution

```bash

The reported block sends a direct message through belt. Automated messages can expose private text or contact users unexpectedly.

Medium

SKILL.md:86-88

Ruby/shell backtick execution

```bash

The reported block follows a user through belt. This is an authenticated account mutation and can be abused for growth automation.

Medium

SKILL.md:92-94

Ruby/shell backtick execution

```bash

The reported block retrieves a user profile through the external CLI. It is read-only, but it still performs network access through belt.

Medium

SKILL.md:98-100

Ruby/shell backtick execution

```bash

The reported block retrieves tweet details through the external CLI. It is read-only, but it still performs network access through belt.

Medium

SKILL.md:104-106

Ruby/shell backtick execution

```bash

The reported block deletes a tweet through belt. This is a destructive authenticated account action.

Medium

SKILL.md:110-119

Ruby/shell backtick execution

```bash

The reported block generates an image, writes output to a file, and posts media through belt. It combines filesystem and network side effects.

Medium

SKILL.md:123-132

Ruby/shell backtick execution

```bash

The reported block generates a video and posts media through belt. It invokes third-party app workflows and publishes to a connected account.

Medium

SKILL.md:136-148

Ruby/shell backtick execution

```bash

The reported block recommends installing multiple external skills with npx. That expands supply-chain exposure beyond this skill.

Medium

SKILL.md:148-150

Ruby/shell backtick execution

```

The reported range includes an inline belt store command that contacts external app metadata. It is limited, but it is still a networked command.

Low

SKILL.md:13

Hardcoded URL

![Twitter/X Automation](https://cloud.inference.sh/app/files/u/4mg21r6ta37mpaz6ktzwtt8krr/01kgad3pxs

The Markdown image embeds a remote cloud.inference.sh asset. Rendering it can trigger a network request and disclose viewer metadata.

Low

SKILL.md:17

Hardcoded URL

> Requires inference.sh CLI (`belt`). [Install instructions](https://raw.githubusercontent.com/infer

The install instructions link to a raw GitHub file on a mutable branch. Users may follow remote setup content outside the reviewed skill.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/skills-shell-twitter-automation/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/skills-shell-twitter-automation/security.svg)](https://skillstore.io/skills/skills-shell-twitter-automation?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/skills-shell-twitter-automation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/skills-shell-twitter-automation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/skills-shell-twitter-automation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

skills-shell. (2026). twitter-automation security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/skills-shell-twitter-automation/audits/5

BibTeX citation

@techreport{skills-shell-skills-shell-twitter-automation-2026,
  author = {skills-shell},
  title = {twitter-automation security audit report (audit version 5)},
  institution = {Skillstore},
  year = {2026},
  number = {5},
  url = {https://skillstore.io/skills/skills-shell-twitter-automation/audits/5},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "twitter-automation security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
  - name: "skills-shell"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/skills-shell-twitter-automation/audits/5"
identifiers:
  - type: other
    value: "skillstore:skills-shell-twitter-automation:audit:5"
    description: "Skillstore immutable audit report identifier"

Compare variants

16 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

sickn33 Recommended

sickn33-twitter-automation

Skillstore Score 70

Evidence Confidence High

Skillstore usage 7

Updated

2026-08-21

inferen-sh

inferen-sh-twitter-automation

Skillstore Score 69

Evidence Confidence High

Skillstore usage 8

Updated

2026-08-21

skillssh

skillssh-twitter-automation

Skillstore Score 50

Evidence Confidence High

Skillstore usage 8

Updated

2026-08-21

infsh-skills

infsh-skills-twitter-automation

Skillstore Score 50

Evidence Confidence High

Skillstore usage 7

Updated

2026-08-21

skills-shell Current

skills-shell-twitter-automation

Skillstore Score 50

Evidence Confidence Medium

Skillstore usage 5

Updated

2026-08-21

101-skills

101-skills-twitter-automation

Skillstore Score 50

Evidence Confidence Medium

Skillstore usage 5

Updated

2026-08-21

qu-skills

qu-skills-twitter-automation

Skillstore Score 50

Evidence Confidence Medium

Skillstore usage 4

Updated

2026-08-21

tul-sh

tul-sh-twitter-automation

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 11

Updated

2026-08-21

toolshell

toolshell-twitter-automation

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 11

Updated

2026-08-21

inference-sh

inference-sh-twitter-automation

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 9

Updated

2026-08-21

inference-shell

inference-shell-twitter-automation

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 9

Updated

2026-08-21

inference-sh-8

inference-sh-8-twitter-automation

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 8

Updated

2026-08-21

halt-catch-fire

halt-catch-fire-twitter-automation

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 8

Updated

2026-08-21

inference-skills

inference-skills-twitter-automation

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 5

Updated

2026-08-21

inference-sh-skills

inference-sh-skills-twitter-automation

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 5

Updated

2026-08-21

inference-sh-9

inference-sh-9-twitter-automation

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 4

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Publish Product Updates

Prepare and publish approved Twitter/X updates from a repeatable command workflow.

Manage Engagement Tasks

Like, retweet, follow, or retrieve posts after reviewing each account action.

Post Generated Media

Generate image or video content through belt apps, then create a media post.

Try These Prompts

Post a Text Update

Use twitter-automation to prepare one Twitter/X post from this message: [message]. Ask for confirmation before publishing.

Create a Media Post

Create a Twitter/X media post using this text and media URL: [text] [media URL]. Confirm details before running any command.

Review Engagement Actions

Review these target posts and users: [targets]. Recommend safe engagement actions and ask before changing the account.

Coordinate Generated Media Workflow

Plan a workflow that generates media from this brief, captures the media URL, and prepares a Twitter/X post for approval.

Best Practices

Review every post, message, follow, like, retweet, and deletion before approving execution.
Use a dedicated Twitter/X account with limited permissions for automation workflows.
Keep media URLs, recipient IDs, and tweet IDs in an approval record.

Avoid

Do not run bulk engagement actions without reviewing targets and platform policy requirements.
Do not send direct messages to users who have not opted in.
Do not install related skills or run broad belt commands without a separate trust review.

Frequently Asked Questions

What does this skill automate?

It documents belt CLI workflows for Twitter/X posts, media posts, likes, retweets, direct messages, follows, deletion, and profile lookup.

Does it require an account connection?

Yes. The belt CLI and the Twitter/X integration must be configured before account actions can run.

Can it post media?

Yes. It can create media posts when a supported and reachable media URL is supplied.

Can it change my Twitter/X account?

Yes. Posting, deleting, liking, retweeting, following, and sending messages are account-changing actions.

Is it safe for bulk outreach?

No. Bulk outreach should be reviewed for consent, platform rules, and brand risk before any command runs.

Which AI tools can use it?

The report lists support for Claude, Codex, and Claude Code.

Developer Details

Author

skills-shell

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/skills-shell/skills/tree/main/tools/social/twitter-automation/

Ref

f93e9bb0daca99badb6a7e574b97737155d57cb3

Maintenance freshness

7/18/2026

Usage

4 downloads · 0 views

File structure

📄 SKILL.md

twitter-automation

Install with my Agent

Agent-readable resources

Test it

Security Audit

Confirmed security concerns (2)

Risk Factors

Copy report link

Markdown badge

HTML badge

Embed card

APA citation

BibTeX citation

CITATION.cff

Compare variants

Skillstore Score

What You Can Build

Publish Product Updates

Manage Engagement Tasks

Post Generated Media

Try These Prompts

Best Practices

Avoid

Frequently Asked Questions

Developer Details