Tweet Share Card

Convert an X/Twitter post URL into a polished share card image by capturing the tweet content and compositing it on a styled background.

Security Scan

The skill claims no external requirements but its runtime scripts rely on macOS (osascript + /usr/sbin/screencapture) and controlling a visible Chrome session to take screenshots—this mismatch and the fact it will capture screen content are notable concerns.

Purpose & Capability

The description says it converts a tweet URL into a share image, which matches the included scripts' purpose. However the skill metadata declared no required binaries/OS, while the capture script clearly depends on macOS-specific tools (osascript and /usr/sbin/screencapture) and a visible Google Chrome process. The package should have declared an OS restriction and required binaries.

Instruction Scope

Runtime instructions require opening the tweet in the user's logged-in Chrome profile and taking a visible-screen screenshot of the browser window. That is within the stated goal (a real screenshot) but grants the skill the ability to operate the user's browser and capture portions of the screen — which could expose unrelated on-screen content. The SKILL.md also prefers a 'dedicated Chrome profile' but gives no guidance on how that profile is selected or how profile isolation is enforced.

Install Mechanism

No install spec (instruction-only) which reduces distribution risk. However two local Python scripts are included and intended to be executed. There is no network download or external installer, but executing bundled scripts still requires runtime permissions and appropriate binaries (Python, PIL).

Credentials

The skill requests no environment variables or credentials, which is good, but it implicitly requires access to the user's desktop environment and Chrome session (which are not declared). It also assumes presence of system utilities and a logged-in X/Twitter session. The absence of these requirements in metadata is a proportionality/mis-declaration issue.

Persistence & Privilege

The skill is not marked always:true and does not modify other skills or system-wide settings. It writes output files to workspace/tmp only, which is normal for an image-generation task.

What to consider before installing

This skill will open a browser tab in a visible Chrome window and take a screenshot of the browser area using macOS-specific tools (osascript and /usr/sbin/screencapture). That means: (1) it only realistically works on macOS with Google Chrome available; (2) it can capture on-screen content — potentially sensitive information if the browser or window shows other data; (3) the skill metadata does not declare these OS/binary requirements, which is an inconsistency you should ask the author to fix. Before installing: verify you want a skill that can control your browser and capture screenshots, confirm you are on macOS and have a dedicated Chrome profile for this use, inspect the two included scripts, and ensure the agent is only allowed to run the skill when you explicitly invoke it (disable autonomous invocation if you prefer). If you are not on macOS or do not want desktop/browser screenshots to be taken, do not install.

Create a share image from an X/Twitter post.

When to use

• User sends an x.com / twitter.com post URL
• User wants a tweet screenshot, share card, poster, or social-share image
• User wants the final image sent back in chat

Workflow

1. Extract the tweet URL from the user message.
2. Open the tweet in the dedicated visible Chrome profile/session already used for X login.
3. Capture the tweet content area only:
   • keep avatar/name/text/link preview
   • exclude right sidebar
   • exclude reply/action counts when possible
   • do not rewrite or re-typeset tweet text
4. Parse any user-requested color style (examples: pink, blue-purple, purple-blue, peach, mint).
5. Composite the captured tweet area onto a poster background using that style.
6. Save the final image under workspace/tmp/.
7. Send the final image back to the user.

Rules

• Prefer the user's logged-in dedicated Chrome profile, not their default browser profile.
• Do not use headless/embed screenshots if they produce blank/incorrect tweet content.
• The tweet content must be a real screenshot, not re-rendered fake text.
• Default background style: clean pink poster style.
• Support color presets when the user asks, including pink, blue-purple, purple-blue, peach, and mint.
• Default output is a square share card with a peach background unless the user asks for another preset.
• The white content card should adapt to content height instead of using a fixed internal height.
• Preserve the tweet content area without cropping away core text.
• Always inspect the result before sending if the capture path changed.

Output

Return the final image directly to the user with a short caption only if needed.

Scripts

• python3 {Skills Directory}/tweet-share-card/scripts/capture_visible_tweet.py <tweet_url> <output_png>
• python3 {Skills Directory}/tweet-share-card/scripts/compose_pink_card.py <tweet_capture_png> <output_png> [pink|blue-purple|purple-blue|peach|mint]