📦
remotion-render
69Render React Animations as MP4 Videos
Teams need reliable videos from React animation code without manual export work. This skill sends Remotion TSX to inference.sh and returns an MP4 render.
Design & Creative View
Skills twitter-automation
📦
twitter-automation
Content revision r1 Medium Risk ⚙️ External commands🌐 Network access
Automate Twitter/X Posts and Engagement
Manual Twitter/X posting and engagement can slow campaign work. This skill uses inference.sh CLI apps to run approved posting, media, and engagement tasks.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "twitter-automation" from https://skillstore.io/skills/skillssh-twitter-automation.md and its manifest at https://skillstore.io/api/skills/skillssh-twitter-automation/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "twitter-automation". Post this approved launch message to X.
Expected outcome:
The skill prepares the tweet, asks for final approval, runs the posting app, and returns the resulting post status.
Using "twitter-automation". Share this approved caption with a hosted image URL.
Expected outcome:
The skill verifies the media URL, creates a media post through inference.sh, and reports whether the post succeeded.
Using "twitter-automation". Like and retweet these approved post IDs.
Expected outcome:
The skill lists the target IDs, waits for confirmation, runs the engagement actions, and summarizes each result.
Security Audit
Medium Riskv4 • 7/7/2026 Open versioned report
Several external-command alerts are Markdown syntax false positives, but multiple examples intentionally run infsh commands that can post, engage, send DMs, delete posts, or install related skills. Most hardcoded URL alerts are documentation references; the remote image is a low-risk external fetch. No prompt injection or secret exfiltration evidence was found.
1
Files scanned
156
Lines analyzed
15
Review items
0
False positives ignored
Confirmed security concerns (1)
Medium
Account-Impacting Social Media Automation
The skill documents apps that post tweets, like, retweet, send direct messages, follow users, delete posts, and retrieve profiles. These actions can change a connected X account or expose relationship data, so the agent should require clear approval before each command.
The listed apps and examples explicitly include posting, engagement, direct messaging, following, and deletion actions. This is intended functionality, but it is account-impacting and abuse-prone without explicit approval.
Capability review items (15)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Ruby/shell backtick execution
```bash
The fenced shell example runs infsh login and x/post-tweet, which invokes an external CLI and can publish through a connected X account. This is intended functionality, but it is a real account-impacting command path.
Medium
Ruby/shell backtick execution
```bash
The shell example runs infsh to publish a tweet, which can create public content on the user account. It is a real external command with network side effects.
Medium
Ruby/shell backtick execution
```bash
The block runs infsh sample and x/post-create with a media URL, causing external CLI execution and network posting. Inputs should be reviewed before execution.
Medium
Ruby/shell backtick execution
```bash
The shell example runs infsh to like a tweet, which changes engagement state on a connected X account. This is a real external command path.
Medium
Ruby/shell backtick execution
```bash
The shell example runs infsh to retweet a post, which can publicly amplify content from the connected account. This is a real external command with account side effects.
Medium
Ruby/shell backtick execution
```bash
The shell example runs infsh to send a direct message, which can expose private content to a recipient. This is a real external command with privacy and abuse risk.
Medium
Ruby/shell backtick execution
```bash
The shell example runs infsh to follow a user, which changes the connected account relationship graph. This is a real external command with account side effects.
Medium
Ruby/shell backtick execution
```bash
The shell example runs infsh to retrieve a user profile, sending a lookup request through the external CLI. It is mostly read-only but still contacts external services.
Medium
Ruby/shell backtick execution
```bash
The shell example runs infsh to retrieve post details, sending a lookup request through the external CLI. It is mostly read-only but still contacts external services.
Medium
Ruby/shell backtick execution
```bash
The shell example runs infsh to delete a tweet, which is a destructive action on the connected account. This is a real external command path.
Medium
Ruby/shell backtick execution
```bash
The workflow runs external AI generation and then x/post-create, combining multiple networked CLI actions with public posting. This is intended but account-impacting.
Medium
Ruby/shell backtick execution
```bash
The workflow runs external video generation and then x/post-create, combining multiple networked CLI actions with public posting. This is intended but account-impacting.
Medium
Ruby/shell backtick execution
```bash
The related-skills block uses npx skills add commands to install additional skills from an external source. That creates a supply-chain risk if run without review.
Medium
Ruby/shell backtick execution
```
The line documents infsh app list as an external command, likely read-only but still executed through the external CLI. The risk is limited, but the command path is real.
Low
Hardcoded URL
SKILL.md:15 SKILL.md:17-22 SKILL.md:22-29 SKILL.md:29-30 SKILL.md:30-31 SKILL.md:31-32 SKILL.md:32-33 SKILL.md:33-34 SKILL.md:34-35 SKILL.md:35-36 SKILL.md:36-37 SKILL.md:37-43 SKILL.md:43-45 SKILL.md:45-49 SKILL.md:49-59 SKILL.md:59-63 SKILL.md:63-65 SKILL.md:65-69 SKILL.md:69-71 SKILL.md:71-75 SKILL.md:75-80 SKILL.md:80-84 SKILL.md:84-86 SKILL.md:86-90 SKILL.md:90-92 SKILL.md:92-96 SKILL.md:96-98 SKILL.md:98-102 SKILL.md:102-104 SKILL.md:104-108 SKILL.md:108-117 SKILL.md:117-121 SKILL.md:121-130 SKILL.md:130-134 SKILL.md:134-146 SKILL.md:146-148
🌐 Network access (7)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/skillssh-twitter-automation/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/skillssh-twitter-automation?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/skillssh-twitter-automation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/skillssh-twitter-automation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/skillssh-twitter-automation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
skillssh. (2026). twitter-automation security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/skillssh-twitter-automation/audits/4BibTeX citation
@techreport{skillssh-skillssh-twitter-automation-2026,
author = {skillssh},
title = {twitter-automation security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/skillssh-twitter-automation/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "twitter-automation security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "skillssh"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/skillssh-twitter-automation/audits/4"
identifiers:
- type: other
value: "skillstore:skillssh-twitter-automation:audit:4"
description: "Skillstore immutable audit report identifier"
Compare variants
16 installable variantsEach author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.
Why this variant is first
Highest Skillstore Score
Author / source Skillstore Score Evidence Confidence Skillstore usage Updated
sickn33 Recommended
sickn33-twitter-automation
Skillstore Score 70
Evidence Confidence High
Skillstore usage 8
Updated
2026-09-09
inferen-sh-twitter-automation
Skillstore Score 69
Evidence Confidence High
Skillstore usage 10
Updated
2026-09-09
skillssh Current
skillssh-twitter-automation
Skillstore Score 50
Evidence Confidence High
Skillstore usage 10
Updated
2026-09-09
infsh-skills-twitter-automation
Skillstore Score 50
Evidence Confidence High
Skillstore usage 8
Updated
2026-09-09
qu-skills-twitter-automation
Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 7
Updated
2026-09-09
skills-shell-twitter-automation
Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 6
Updated
2026-09-09
101-skills-twitter-automation
Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 6
Updated
2026-09-09
toolshell-twitter-automation
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 13
Updated
2026-09-09
tul-sh-twitter-automation
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 12
Updated
2026-09-09
halt-catch-fire-twitter-automation
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 11
Updated
2026-09-09
inference-sh-twitter-automation
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 10
Updated
2026-09-09
inference-shell-twitter-automation
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 10
Updated
2026-09-09
inference-sh-8-twitter-automation
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 9
Updated
2026-09-09
inference-skills-twitter-automation
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 7
Updated
2026-09-09
inference-sh-skills-twitter-automation
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 6
Updated
2026-09-09
inference-sh-9-twitter-automation
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 6
Updated
2026-09-09
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
87
Content
69
Community
83
Spec Compliance
What You Can Build
Publish Approved Updates
Post prepared campaign messages or announcements to a connected Twitter/X account.
Share Launch Media
Create posts that combine approved copy with image or video URLs from generation workflows.
Manage Targeted Engagement
Like, retweet, follow, or message specified accounts when IDs and recipients are approved.
Try These Prompts
Post a Text Update
Use twitter-automation to post this approved text to X: [approved text]. Confirm the account before running the command.
Create a Media Post
Create an X post with this approved caption and media URL: [caption] [media URL]. Verify the media URL first.
Engage With Specific Posts
Like and retweet these approved post IDs: [post IDs]. Show the IDs and ask for confirmation before action.
Generate and Publish Campaign Media
Generate media from this prompt, review the returned asset URL, then create an approved X post with this caption: [caption].
Best Practices
- Confirm the connected X account before every posting or engagement command.
- Review exact text, media URLs, recipients, usernames, and post IDs before running actions.
- Use least-privilege X integration permissions when possible.
Avoid
- Do not automate likes, follows, retweets, or DMs without explicit user approval.
- Do not post generated media before a human reviews the final asset URL.
- Do not run optional skill installation commands without inspecting the source.
Frequently Asked Questions
Does this skill post directly to Twitter/X?
Yes. It uses inference.sh X apps to post or engage after the CLI and integration are configured.
Does it require an external account?
Yes. It requires an inference.sh login and a configured X integration.
Can it post media?
Yes. It can create posts that reference an accessible media URL.
Can it send direct messages?
Yes. The documented apps include direct message sending to a specified recipient.
Does it include scheduling?
The description mentions scheduling, but the visible examples focus on immediate CLI actions.
Is human approval recommended?
Yes. Approval is recommended before any post, message, follow, delete, like, or retweet action.
Developer Details
Author
skillsshLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
f93e9bb0daca99badb6a7e574b97737155d57cb3
Maintenance freshness
7/18/2026
Usage
5 downloads · 102 views
File structure
📄 SKILL.md
More from skillssh
View all📦
web-search
50Search and Extract Web Sources
Research tasks need current sources and clean page text. This skill routes search, answers, and extraction through Tavily and Exa apps.
Research & Learning View
📦
ai-video-generation
50Create AI Videos with Multiple Models
Choosing and invoking video models can be complex. This skill provides model guidance and belt CLI examples for generation, animation, editing, lipsync, sound, and upscaling.
Design & Creative View
📦
python-executor
38Run Python Code in a Sandbox
Agents often need Python execution without managing local packages. This skill runs scripts through inference.sh with common data, web, media, and document libraries.
Coding & Development View
📦
infsh-cli
38Run AI Apps with the inference.sh CLI
Teams need one interface for many hosted AI models and media tools. This skill helps agents discover, run, and monitor inference.sh apps from the CLI.
DevOps & Infrastructure View
📦
agent-browser
38Automate Browser Tasks with Agent Browser
Manual web interaction slows research, testing, and data collection. This skill controls hosted browser sessions with structured navigation, actions, extraction, and visual capture.
Productivity View
Related Skills
View all📦
lark-event
79Stream Lark Events for Real-Time Workflows
by larksuite
Real-time Lark workflows need reliable event streams, filtering, and clean shutdown behavior. This skill guides AI agents through bounded event consumption with lark-cli.
Communication View
📦
social
79Create Better Social Media Content
by coreyhaines31
Planning effective social content across platforms requires consistent formats, voice, and measurement. This skill provides practical frameworks for creation, repurposing, listening, and optimization.
Communication View
📦
content-creator
88Create SEO Content With Brand Voice
by alirezarezvani
Marketing teams need consistent content that fits each channel and supports search goals. This skill combines brand voice guidance, content templates, SEO checks, and social media planning.
Writing & Content View
📦
viral-short-form
87Write Short-Form Videos That Hold Attention
by vyralcontent
Short-form teams often lose time turning rough ideas into strong hooks and scripts. This skill creates hook sets, scripts, carousels, and critiques for major platforms.
Writing & Content View
📦
lark-doc
87Manage Lark Docs and Feishu Wiki Content
by larksuite
Teams need reliable document updates without switching between tools. This skill guides Claude, Codex, and Claude Code through authenticated lark-cli workflows for Lark Docs.
Office & Reports View
📦
pptx
85Create PowerPoint Presentations with Python
by AutumnsGrove
Building polished PowerPoint decks by hand is slow and hard to repeat. This skill guides Claude, Codex, and Claude Code through PPTX creation, editing, and automation with python-pptx.
Office & Reports View