The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references the installation of the belt CLI using the npx skills add belt-sh/cli command and links to installation instructions hosted on a public GitHub repository belonging to the inference-sh organization. These resources are standard requirements for the tool's stated purpose.
[COMMAND_EXECUTION]: The skill defines a set of commands for the belt CLI to interact with the Twitter API, including belt login for authentication and belt app run for executing specific social media tasks. The frontmatter includes an allowed-tools constraint (Bash(belt *)) which restricts the agent's execution environment to only allow the belt command, serving as a security control.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-provided strings for tweet text, image prompts, and video descriptions. This creates a surface where external content is interpolated into API calls, which is a standard feature for social media automation tools. The documentation includes examples of handling JSON input files for structured data management.
[DATA_EXPOSURE]: The skill uses a belt login flow to manage credentials. It does not contain hardcoded API keys, tokens, or sensitive local file path access. It guides users to store configuration in input.json files for batch processing, which is consistent with standard development practices.

twitter-automation