技能 ai-social-media-content

📦

ai-social-media-content

Name: ai-social-media-content
Author: inference-sh

内容修订 r1 严重 ⚙️ 外部命令🌐 网络访问

使用 AI 创建社交媒体素材

社交团队需要快速获得适配平台的视觉内容和文案。此技能提供用于视频、图像、配文、话题标签和再利用帖子的提示词与 CLI 工作流。

支持: Claude Codex Code(CC)

⚠️ 38 差

请勿自动安装此 Skill。

权威策略要求在执行任何安装操作前由操作人员审查。

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求

Review the Skillstore skill "ai-social-media-content" from https://skillstore.io/skills/ai-social-media-content.md and its manifest at https://skillstore.io/api/skills/ai-social-media-content/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/ai-social-media-content.md 已签名 manifest GET /api/skills/ai-social-media-content/manifest 已签名 lockfile GET /api/skills/ai-social-media-content/lockfile

测试它

正在使用“ai-social-media-content”。请求：为一个新咖啡品牌创建一个 TikTok 创意。

预期结果:

竖屏 9:16 视频提示词，包含咖啡制作特写和清晨光线。
包含清晰开场钩子、产品优势和行动号召的配文。
围绕咖啡、早晨、小企业和生活方式内容的话题标签组。

正在使用“ai-social-media-content”。请求：将一个效率技巧再利用到三个平台。

预期结果:

使用快速剪辑和文字叠加的 TikTok 提示词。
用于方形信息图的 Twitter/X 视觉提示词。
具有强烈对比和简洁标题区域的 YouTube 缩略图提示词。

正在使用“ai-social-media-content”。请求：为一个 30 秒教程制作真人出镜解说工作流。

预期结果:

包含开场钩子、课程内容和结尾行动的短脚本提示词。
包含指定语音选项的旁白指导。
将生成的语音和所选图像结合起来的虚拟形象视频提示词。

安全审计

严重

v4 • 2026/7/6 打开版本化报告

The skill is primarily a Markdown guide for inference.sh social media workflows. Most shell-backtick detections are Markdown fence artifacts, but several examples do run third-party CLI commands. The remote curl-to-shell installer at SKILL.md line 21 is confirmed as a critical risk.

已扫描文件

254

分析行数

复核项

已忽略误报

已确认安全问题 (1)

严重

SKILL.md:21

Pipe to shell pattern

curl -fsSL https://cli.inference.sh | sh && infsh login

The command pipes a remote installer directly into sh and then starts login. This can execute unreviewed code from the network in the user environment.

能力复核项 (17)

这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。

中

SKILL.md:20-27

Ruby/shell backtick execution

```bash

The code block documents a shell workflow that installs the inference.sh CLI and runs infsh commands. This is legitimate for the skill, but it still asks users or agents to execute third-party CLI commands.

中

SKILL.md:44-49

Ruby/shell backtick execution

```bash

The block contains infsh app run examples that call external inference providers. The arguments are mostly fixed examples, so the main risk is external execution and data egress, not shell injection.

中

SKILL.md:53-60

Ruby/shell backtick execution

```bash

The block contains a shell loop that calls infsh and writes carousel output files. The risk is controlled but real because it executes a third-party CLI and creates local files.

中

SKILL.md:64-69

Ruby/shell backtick execution

```bash

The block contains infsh app run examples that call external inference providers. The arguments are mostly fixed examples, so the main risk is external execution and data egress, not shell injection.

中

SKILL.md:73-84

Ruby/shell backtick execution

```bash

The block calls infsh for image generation and includes a Twitter/X posting command. This can create external side effects if credentials are configured, so the external command risk is real.

中

SKILL.md:88-105

Ruby/shell backtick execution

```bash

The workflow calls external model, text-to-speech, and avatar services through infsh. The commands are documented examples, but they can send script, image, and audio data to providers.

中

SKILL.md:111-115

Ruby/shell backtick execution

```bash

The block contains infsh app run examples that call external inference providers. The arguments are mostly fixed examples, so the main risk is external execution and data egress, not shell injection.

中

SKILL.md:119-123

Ruby/shell backtick execution

```bash

The block contains infsh app run examples that call external inference providers. The arguments are mostly fixed examples, so the main risk is external execution and data egress, not shell injection.

中

SKILL.md:127-131

Ruby/shell backtick execution

```bash

The block contains infsh app run examples that call external inference providers. The arguments are mostly fixed examples, so the main risk is external execution and data egress, not shell injection.

中

SKILL.md:135-139

Ruby/shell backtick execution

```bash

The block contains infsh app run examples that call external inference providers. The arguments are mostly fixed examples, so the main risk is external execution and data egress, not shell injection.

中

SKILL.md:143-147

Ruby/shell backtick execution

```bash

The block contains infsh app run examples that call external inference providers. The arguments are mostly fixed examples, so the main risk is external execution and data egress, not shell injection.

中

SKILL.md:151-156

Ruby/shell backtick execution

```bash

The block contains infsh app run examples that call external inference providers. The arguments are mostly fixed examples, so the main risk is external execution and data egress, not shell injection.

中

SKILL.md:160-164

Ruby/shell backtick execution

```bash

The block contains infsh app run examples that call external inference providers. The arguments are mostly fixed examples, so the main risk is external execution and data egress, not shell injection.

中

SKILL.md:170-188

Ruby/shell backtick execution

```bash

The block uses a shell variable to drive multiple infsh app runs for repurposing. No command injection is shown, but it is still real external CLI execution.

中

SKILL.md:192-201

Ruby/shell backtick execution

```bash

The batch workflow loops over topics and runs infsh for each item while writing output files. This is a legitimate workflow with real external command and local file effects.

中

SKILL.md:236-251

Ruby/shell backtick execution

```bash

The related-skills block uses npx skills add commands to install additional community skills. Installing code from a repository is a real external command risk and should require review.

低

SKILL.md:21

Hardcoded URL

curl -fsSL https://cli.inference.sh | sh && infsh login

The URL is used in an installer command that downloads a remote script. This creates a real network dependency before local execution.

检测到的模式

Pipe to shell pattern

审计者: codex 查看审计历史 →

分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告

复制报告链接

https://skillstore.io/skills/ai-social-media-content/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/ai-social-media-content/security.svg)](https://skillstore.io/skills/ai-social-media-content?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/ai-social-media-content?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/ai-social-media-content/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/ai-social-media-content.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学术引用 (APA · BibTeX · CFF)

APA 引用

inference-sh. (2026). ai-social-media-content security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/ai-social-media-content/audits/4

BibTeX 引用

@techreport{inference-sh-ai-social-media-content-2026,
  author = {inference-sh},
  title = {ai-social-media-content security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/ai-social-media-content/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "ai-social-media-content security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "inference-sh"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/ai-social-media-content/audits/4"
identifiers:
  - type: other
    value: "skillstore:ai-social-media-content:audit:4"
    description: "Skillstore immutable audit report identifier"

比较变体

2 个可安装变体

每位作者的技能都保持为独立的可安装项。推荐变体按 Skillstore 证据排序。

为什么此变体排名第一

Skillstore 使用量更高

作者 / 来源 Skillstore 评分证据置信度 Skillstore 使用量已更新

inference-sh 推荐当前

ai-social-media-content

Skillstore 评分 38

证据置信度中

Skillstore 使用量 47

已更新

2026-09-09

inference-sh-9

inference-sh-9-ai-social-media-content

Skillstore 评分 38

证据置信度中

Skillstore 使用量 25

已更新

2026-09-09

Skillstore 评分

评分依据证据置信度: 中

架构

可维护性

内容

社区

规范符合性

你能构建什么

发布短视频营销活动

为 TikTok、Reels 和 Shorts 创建竖屏视频创意及配套配文。

批量创建创作者素材

根据主题列表制作每周视觉内容、开场钩子、配文和旁白创意。

准备产品视觉内容

为新品发布生成产品展示提示词、缩略图和可分享的社交媒体图形。

试试这些提示

创建一个短视频

为我的主题创建一个 TikTok 视频创意。包括宽高比、时长、视觉提示词、配文和话题标签。

制作一组轮播图

为这个主题创建一个五页 Instagram 轮播图。保持视觉风格一致，并为每页包含配文。

跨平台再利用

将这个创意转化为 TikTok、Twitter/X、YouTube 缩略图和 Instagram 信息流素材。解释每个平台的格式选择。

规划每周内容批次

为这些主题创建一个七天内容批次。为每篇帖子包含视频提示词、配文、话题标签和审核备注。

最佳实践

在运行任何示例之前，审核安装器命令和 CLI 凭据。
提供平台、宽高比、时长、受众、品牌风格和审核标准。
发布前检查生成素材的版权、准确性、披露需求和平台政策。

避免

未经验证就运行远程安装器或 npx install 命令。
未经明确人工批准就发布自动化社交媒体帖子。
使用缺少受众、品牌或政策约束的通用爆款提示词。

常见问题

此技能需要 inference.sh 吗？

是。工作流是为 inference.sh CLI 及其托管模型应用编写的。

它可以创建视频和图像吗？

可以。它提供用于视频、图像、缩略图、虚拟形象和语音工作流的 CLI 示例。

它可以撰写配文和话题标签吗？

可以。它包含用于配文、话题标签、开场钩子和行动号召的提示词模式。

它会直接发布到社交网络吗？

它包含一个 Twitter/X 自动化示例，但发布需要凭据和明确批准。

安装器命令可以安全地自动运行吗？

不安全。远程 pipe-to-shell 安装器应在使用前替换或手动验证。

哪些 AI 工具可以使用此技能？

报告列出了对 Claude、Codex 和 Claude Code 的支持。

开发者详情

作者

inference-sh

许可证

MIT

Skillstore 修订

版本提示

作者未声明版本。

仓库

https://github.com/inference-sh/skills/tree/main/skills/ai-social-media-content/

引用

c1fdca50ff516318f65fed0d7f9e82797c5171dc

维护新鲜度

2026/7/18

使用量

10 次下载 · 267 次浏览

文件结构

📄 SKILL.md

ai-social-media-content

使用我的智能体安装

Agent 可读资源

测试它

安全审计

已确认安全问题 (1)

风险因素

检测到的模式

复制报告链接

Markdown 徽章

HTML 徽章

嵌入卡片

APA 引用

BibTeX 引用

CITATION.cff

比较变体

Skillstore 评分

你能构建什么

发布短视频营销活动

批量创建创作者素材

准备产品视觉内容

试试这些提示

最佳实践

避免

常见问题

开发者详情