技能 ai-social-media-content
📦
ai-social-media-content
內容修訂 r1 嚴重 ⚙️ 外部命令🌐 網路存取
建立 AI 社群媒體內容
社群團隊需要穩定產出可直接用於平台的創意、貼文說明、圖片和影片。此技能提供結構化的 inference.sh 工作流程，用於建立和改編社群內容。
支援: Claude Codex Code(CC)
請勿自動安裝此 Skill。
權威政策要求在執行任何安裝操作前由操作人員審查。
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
智能體請求
Review the Skillstore skill "ai-social-media-content" from https://skillstore.io/skills/inference-sh-9-ai-social-media-content.md and its manifest at https://skillstore.io/api/skills/inference-sh-9-ai-social-media-content/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「ai-social-media-content」。 需要一個關於兩分鐘生產力法則的 TikTok 創意。
預期結果:
一個 30 秒直式影片概念，包含快速開場鉤子、三個場景節拍、精簡貼文說明和實用標籤。
正在使用「ai-social-media-content」。 將咖啡產品發表改編成三個平台的內容。
預期結果:
- 一個 Reels 產品展示概念，採用溫暖燈光和開箱流程。
- 一份輪播大綱，涵蓋優點、成分和使用情境。
- 一則 Twitter/X 視覺貼文，搭配精簡的上市訊息。
正在使用「ai-social-media-content」。 為一支關於 AI 趨勢的影片建立縮圖創意。
預期結果:
一個高對比縮圖方向，包含清楚的焦點主體、易讀的文字區域，以及相符的貼文說明角度。
安全審計
嚴重v5 • 2026/7/9 開啟版本化報告
Most static external-command hits were Markdown fence noise or intended inference.sh examples, but several real risks remain. The skill includes a critical curl-to-shell installer, many external cloud CLI calls, remote skill installation examples, and a Twitter/X posting workflow that requires explicit user approval.
1
已掃描檔案
251
分析行數
17
複核項目
0
已忽略的誤報
已確認的安全問題 (2)
嚴重
Pipe to shell pattern
curl -fsSL https://cli.inference.sh | sh && infsh login
The command uses curl to download an installer and pipes it directly to sh. This executes remote code without local review and should block automatic publication.
中
Automated Social Media Posting Workflow
The skill includes a Twitter/X workflow that posts text and media through twitter/post-tweet. This can publish content externally if an agent runs it without explicit user approval.
Lines 76-80 explicitly label Twitter automation and call a posting app with post text and media. The risk is contextual because posting depends on account authorization and user intent.
能力複核項目 (17)
這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。
嚴重
Ruby/shell backtick execution
```bash
The range contains a shell example that fetches an installer with curl and pipes it to sh before login. Executing a remote script without inspection is a real code execution risk.
嚴重
Hardcoded URL
curl -fsSL https://cli.inference.sh | sh && infsh login
The URL is fetched by curl and piped directly into sh, causing remote content to execute locally. This is a high-impact installation pattern even if the service is legitimate.
高
Ruby/shell backtick execution
```bash
The related skills section uses npx skills add commands to install additional remote skills. Installing more skills from an external source is a supply-chain and permission expansion risk.
中
Ruby/shell backtick execution
```bash
The code block runs infsh app run against a third-party video model and sends prompt content externally. This is intended behavior, but it is real external command and network activity.
中
Ruby/shell backtick execution
```bash
The carousel workflow uses a shell loop to call infsh repeatedly and write JSON output files. This is legitimate functionality, but it is real external command execution with local file output.
中
Ruby/shell backtick execution
```bash
The thumbnail workflow invokes infsh app run against an external image model. The command is expected for the skill, but it sends prompt data to a third-party service.
中
Ruby/shell backtick execution
```bash
The range contains infsh commands that generate a visual and call twitter/post-tweet with text and media. This can publish externally through a connected account.
中
Ruby/shell backtick execution
```bash
The talking head workflow calls external text, speech, and avatar generation apps and writes outputs to files. This is intended, but it transmits content and asset URLs to third-party services.
中
Ruby/shell backtick execution
```bash
The example runs infsh app run for an external video generation model. The command is purposeful, but it is real external command execution and data transfer.
中
Ruby/shell backtick execution
```bash
The tutorial workflow invokes infsh app run for external video generation. This is legitimate for the skill, but it sends prompt content to a third-party service.
中
Ruby/shell backtick execution
```bash
The product showcase workflow calls an external video generation app through infsh. It is intended use, but it performs external command and network activity.
中
Ruby/shell backtick execution
```bash
The lifestyle example invokes infsh app run against an external video model. This sends prompt content outside the local environment.
中
Ruby/shell backtick execution
```bash
The behind-the-scenes example calls infsh app run for an external video model. The text is benign, but the command is still external execution with network transfer.
中
Ruby/shell backtick execution
```bash
The caption workflow runs infsh against an OpenRouter Claude model and sends prompt text to an external service. This is real external command and network behavior.
中
Ruby/shell backtick execution
```bash
The hook generation example runs infsh against an external text model. It is expected for the skill, but it transfers prompt content to a third-party service.
中
Ruby/shell backtick execution
```bash
The multi-platform workflow defines a shell variable and uses it in multiple infsh commands. It is a real shell workflow that sends content to external generation services.
中
Ruby/shell backtick execution
```bash
The batch workflow loops over topics, calls infsh repeatedly, and writes output files. This is real external command execution and local file creation.
風險因素
⚙️ 外部命令 (33)
SKILL.md:15-22 SKILL.md:22-24 SKILL.md:24-41 SKILL.md:41-46 SKILL.md:46-50 SKILL.md:50-57 SKILL.md:57-61 SKILL.md:61-66 SKILL.md:66-70 SKILL.md:70-81 SKILL.md:81-85 SKILL.md:85-102 SKILL.md:102-108 SKILL.md:108-112 SKILL.md:112-116 SKILL.md:116-120 SKILL.md:120-124 SKILL.md:124-128 SKILL.md:128-132 SKILL.md:132-136 SKILL.md:136-140 SKILL.md:140-144 SKILL.md:144-148 SKILL.md:148-153 SKILL.md:153-157 SKILL.md:157-161 SKILL.md:161-167 SKILL.md:167-185 SKILL.md:185-189 SKILL.md:189-198 SKILL.md:198-233 SKILL.md:233-248 SKILL.md:248-250
🌐 網路存取 (5)
偵測到的模式
Pipe to shell pattern
審計單位: codex 檢視審計紀錄 →
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/inference-sh-9-ai-social-media-content/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/inference-sh-9-ai-social-media-content?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/inference-sh-9-ai-social-media-content?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/inference-sh-9-ai-social-media-content/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/inference-sh-9-ai-social-media-content.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
inference-sh-9. (2026). ai-social-media-content security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/inference-sh-9-ai-social-media-content/audits/5BibTeX 引用
@techreport{inference-sh-9-inference-sh-9-ai-social-media-content-2026,
author = {inference-sh-9},
title = {ai-social-media-content security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/inference-sh-9-ai-social-media-content/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "ai-social-media-content security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "inference-sh-9"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/inference-sh-9-ai-social-media-content/audits/5"
identifiers:
- type: other
value: "skillstore:inference-sh-9-ai-social-media-content:audit:5"
description: "Skillstore immutable audit report identifier"
比較變體
2 個可安裝變體每位作者的技能都保留為獨立的可安裝項目。推薦變體依 Skillstore 證據排序。
為何此變體排名第一
Skillstore 使用量較高
作者 / 來源 Skillstore 評分 證據置信度 Skillstore 使用量 已更新
inference-sh-9-ai-social-media-content
Skillstore 評分 38
證據置信度 中
Skillstore 使用量 28
已更新
2026-09-09
Skillstore 評分
評分依據 證據置信度: 中 55
架構
85
可維護性
87
內容
69
社群
83
規範符合度
你可以打造什麼
規劃短影音
為 TikTok、Reels 或 Shorts 建立直式影片概念、提示詞、貼文說明和標籤。
改編活動素材
將一個活動創意轉換為適用於多個管道的圖片、影片、縮圖和貼文說明格式。
建立產品發表內容
以一致的品牌風格生成產品展示提示詞、輪播概念和上市貼文說明。
試試這些提示
建立一則貼文
為我的主題建立一個 Instagram Reel 概念。包含開場鉤子、視覺方向、貼文說明和十個相關標籤。
草擬影片腳本
為我的受眾撰寫一支 30 秒 TikTok 腳本。包含場景節拍、旁白文字、畫面文字和結尾行動呼籲。
跨平台改編
將這個概念改編成 TikTok 影片、Instagram 輪播、YouTube 縮圖和 Twitter/X 視覺貼文。保持訊息一致。
建立每週批次內容
為這個品牌建立五天的社群內容計畫。包含每天的主題、素材類型、視覺提示詞、貼文說明和審查備註。
最佳實務
- 發布前審查生成貼文的準確性、權利和品牌語氣。
- 在每次請求中提供平台、受眾、語氣、產品細節和視覺風格。
- 任何工作流程發布或貼文到外部帳號前，請使用人工核准。
避免
- 未經事實查核以及必要的法律審查，不要發布生成的宣稱內容。
- 不要在提示詞中包含私人客戶資料、未發布計畫或憑證。
- 在未驗證命令和目的地之前，不要執行安裝程式或發文命令。
常見問題
這個技能針對哪些平台？
它涵蓋 TikTok、Instagram Reels、Instagram feed 貼文、YouTube Shorts、YouTube 縮圖和 Twitter/X 視覺素材。
它會直接建立圖片和影片嗎？
它提供 inference.sh CLI 工作流程，呼叫外部圖片、影片、語音和文字生成模型。
它能協助產生貼文說明和標籤嗎？
可以。它包含貼文說明、開場鉤子、行動呼籲和標籤生成工作流程。
這個技能會自動發布貼文嗎？
它包含一個 Twitter/X 發文範例。使用者應要求在任何內容發布前取得明確確認。
需要哪些設定？
使用者需要 inference.sh CLI、帳號、驗證，以及存取所選模型或應用程式的權限。
生成內容可以直接發布嗎？
不是。使用者在發布前應審查準確性、智慧財產權、安全性和平台政策合規性。
開發者詳細資訊
授權
MIT
Skillstore 修訂
r1
版本提示
作者未聲明版本。
引用
3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88
維護新鮮度
2026/7/18
使用量
15 次下載 · 119 次瀏覽
檔案結構
📄 SKILL.md