Twitter Thread Creation

Twitter/X thread writing with hook tweets, thread structure, and engagement optimization. Covers tweet formatting, character limits, media attachments, and p...

This skill appears to do what it says (help craft and post X threads) but it relies on installing and using a third‑party CLI via a curl|sh installer (dist.inference.sh). Before installing or allowing an agent to run it: 1) do not run curl | sh blindly — review the installer script and verify checksums from a trusted channel; 2) understand that you will need to authenticate the CLI to post to your X account — consider using a separate/sandbox account or least‑privilege credentials; 3) prefer manual installation from a verifiable release (and inspect the binary/source) rather than letting an autonomous agent perform the install; 4) if you enable autonomous invocation, restrict the agent’s permissions or disable automatic tool execution so it cannot install software or post without explicit confirmation. If you want a lower‑risk option, use the writing guidance from the SKILL.md but post manually via the official Twitter/X interface or a vetted, well‑known client.

Type: OpenClaw Skill Name: twitter-thread-creation Version: 0.1.5 The skill bundle is classified as suspicious due to its reliance on powerful tools that, while plausible for the stated purpose, introduce significant risk if the AI agent were to be prompted maliciously. Specifically, the `SKILL.md` instructs the use of `infsh app run infsh/agent-browser` to visit arbitrary URLs and take screenshots, and `infsh app run infsh/html-to-image` to render arbitrary HTML into images. These capabilities could be leveraged for data exposure or unintended actions through prompt injection, even though the skill itself does not demonstrate malicious intent. The `curl | sh` command for installation, while not directly executable by the agent due to `allowed-tools: Bash(infsh *)` restriction, is a risky pattern to include in documentation.