Social Post Generator Agent

Take a blog post URL or text and generate social media posts from it. Use when repurposing content for Twitter, LinkedIn, or creating promotional posts.

Security Scan

The skill appears to do what it says — local shell scripts that fetch an article and generate social-post drafts — with no unexplained credentials, installs, or external endpoints.

Purpose & Capability

Name/description (generate social media posts from an article) matches the provided scripts and declared requirement (curl). Requiring curl is appropriate because the scripts fetch URLs.

Instruction Scope

Runtime instructions are scoped to reading an input URL or file, fetching content with curl, extracting text, and printing generated posts. Minor inconsistencies: SKILL.md mentions a --dry-run flag but none of the scripts implement option parsing for --dry-run; SKILL.md also mentions 'web_fetch' while the scripts use curl (equivalent in effect). The scripts only read the provided input file/URL and create a local cache directory under the skill directory; they do not transmit data to third-party endpoints beyond the initial curl fetch of the user-supplied URL.

Install Mechanism

No install spec; instruction-only plus included shell scripts. Nothing is downloaded or written outside the skill's directory except the created cache directory. This is low-risk compared with remote installers.

Credentials

No required secrets or credentials. The scripts honor optional environment variables documented in SKILL.md (PLATFORM, TONE, BRAND_NAME, HASHTAGS). No unrelated env vars or credential access is requested.

Persistence & Privilege

always is false and the skill does not request elevated persistence. Scripts create and use a cache directory under the skill folder only and do not modify system or other-skill configuration.

Assessment

This skill is internally consistent and appears benign, but review before use: 1) The scripts fetch whatever URL you pass with curl — avoid pointing it at internal/private endpoints or URLs that require authentication (could leak internal content to the terminal). 2) The SKILL.md mentions a --dry-run flag, but the provided scripts don't implement it; expect the scripts to always print output and create a cache directory under the skill folder. 3) The scripts use grep -P (PCRE); some environments' grep builds lack -P and extraction may fail. 4) No credentials are requested, but generated content comes from source text — check that source content doesn't contain sensitive PII you wouldn't want copied into social posts. If you plan to run this in an automated agent with network access, consider the implications of allowing the agent to fetch arbitrary URLs.

Social Post Generator

Transform blog posts and articles into social media content — tweets, LinkedIn posts, and viral hooks.

Environment Variables

Variable	Required	Default	Description
PLATFORM	No	twitter	Target platform: twitter or linkedin
TONE	No	professional	Tone of voice: professional, casual, or technical
BRAND_NAME	No	—	Brand/person name for attribution
HASHTAGS	No	—	Comma-separated default hashtags

Scripts

generate.sh — Generate Posts

Generates 5 social media posts from an article URL or text.

./scripts/generate.sh <url_or_text_file>

Output: 5 formatted posts ready to publish.

thread.sh — Create Twitter Thread

Generates a thread of connected tweets from an article.

./scripts/thread.sh <url_or_text_file>

Output: Numbered thread tweets with proper formatting.

hook.sh — Create Viral Hooks

Generates attention-grabbing opening hooks for social posts.

./scripts/hook.sh <url_or_text_file>

Output: 10 hook variations to test.

Usage Example

export PLATFORM=twitter
export TONE=casual
export BRAND_NAME="MyBrand"

# Generate 5 tweets from an article
./scripts/generate.sh https://example.com/blog/post

# Create a thread
./scripts/thread.sh article.txt

# Get viral hooks
./scripts/hook.sh article.txt

Notes

• Uses web_fetch to extract content from URLs
• Each platform has character limits (Twitter: 280, LinkedIn: 3000)
• Generates hashtag suggestions based on content
• Output is copy-paste ready with line breaks
• Add --dry-run to any script to preview without saving