Social X Post CardSAFE
✨ The agentic HTML editor — your local AI agent writes the HTML, you ship it. 🚀 75 Skills × 9 Surfaces (magazine · deck · poster · XHS / tweet · prototype · data report · Hyperframes) 🛡️ Sandboxed preview · 📤 1-click to WeChat / X / Zhihu / HTML / PNG 🔑 Zero API key — Claude Code / Cursor / Codex /
Overview
✨ The agentic HTML editor — your local AI agent writes the HTML, you ship it. 🚀 75 Skills × 9 Surfaces (magazine · deck · poster · XHS / tweet · prototype · data report · Hyperframes) 🛡️ Sandboxed preview · 📤 1-click to WeChat / X / Zhihu / HTML / PNG 🔑 Zero API key — Claude Code / Cursor / Codex /
3bfcf171063fOBSERVED · 2026-10-07Host compatibility
What the documentation claims. We have not run a compatibility test.
| Host | Status | Notes |
|---|---|---|
| claude-code | mentioned |
What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: social-x-post-card zh_name: "X (Twitter) 帖子卡" en_name: "X / Twitter Post Card" emoji: "X" description: "拟真 X 推文卡片 + 互动数据 (likes/reposts/views), 适配视频叠加或图卡分享" category: card scenario: marketing aspect_hint: "1280×720 或 1080×1080" featured: 44 tags: ["twitter", "x", "social", "card", "overlay"] example_id: sample-social-x-post-card example_name: "X 帖子卡 · AlchainHust 金句" example_format: markdown example_tagline: "X dark mode + 互动数据" example_desc: "一条金句推文 + 12.3K likes / 1.2K reposts + 蓝勾" example_source_url: "https://hyperframes.heygen.com/catalog" example_source_label: "hyperframes · x-post" --- 【模板: X (Twitter) 帖子卡】 【意图】把一段推文内容 (或用户的金句) 渲染成一张拟真度极高的 X 帖子卡片, 用于视频叠加、推特发图、知识沉淀。Inspired by hyperframes x-post。 【画布】1280×720 或 1080×1080, 暗背景 `#0f1419` 或亮背景 `#ffffff` (按 X 主题); 卡片居中, 阴影柔和。 【卡片结构】 - 外框: 圆角 16px, 1px border `#2f3336` (dark) / `#eff3f4` (light), 内边距 16px。 - 顶部 row: 头像 (48×48 圆形, 用 CSS gradient 占位) + 用户名 + handle `@username` + verified 蓝勾 + 时间 (mono, 12px, 灰)。 - 正文: 17-22px, 字重 400; 链接用 X 蓝 `#1d9bf0`; hashtag 同色; mention 同色; 段落间空 0.6em。 - 可选: 引用卡 (小卡内嵌, 灰底, 圆角 12px)。 - 可选: 1 张图 (CSS 渐变 + 描述占位, 不能外链图片), 比例 16:9, 圆角 12px。 - 互动 row: 4 个 icon + 数字 (回复 / 转推 / 引用 / 点赞), icon 用 inline SVG (X 官方风格), 灰色, hover 时变色。 - 顶部右上 X logo 单线 SVG。 - 浏览量 row: 👁️ + 数字 (小字)。 【字体】 - 西文: `Chirp` (X 的字体) → fallback `Inter` 或 `Segoe UI`。 - 中文: `Noto Sans SC` / `PingFang SC`。 - 数字: 同主字体, 不用 mono。 【设计细节】 - 配色 light: bg `#fff`, text `#0f1419`, secondary `#536471`, border `#eff3f4`, accent `#1d9bf0`。 - 配色 dark (推荐, 视频叠加用): bg `#000`, text `#e7e9ea`, secondary `#71767b`, border `#2f3336`, accent `#1d9bf0`。 - 数字格式化: 1.2K / 4.5M (不要原始 1234)。 - 内容必须来自用户输入, 不能编造推文。 - 若用户输入是数据 → 自动总结成一句"金句"推文 (≤ 280 字符)。 - 单文件 HTML; icon 内联 SVG; 不要任何外部图片 URL。 - 可选: 卡片背后加微妙径向高光 `radial-gradient(...)` 增加视频叠加的可读性。
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (0)
No findings outside the package's declared scope.
Gates applied: no_behavioural_pass.
3bfcf171063ffull audit observations/trust-audit/skill/nexu-io__social-x-post-card.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-07 | 3bfcf171063f | SAFE | B | 89 | first audit |
Questions
What does the Social X Post Card skill do?
✨ The agentic HTML editor — your local AI agent writes the HTML, you ship it. 🚀 75 Skills × 9 Surfaces (magazine · deck · poster · XHS / tweet · prototype · data report · Hyperframes) 🛡️ Sandboxed preview · 📤 1-click to WeChat / X / Zhihu / HTML / PNG 🔑 Zero API key — Claude Code / Cursor / Codex /
Is Social X Post Card safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Social X Post Card access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
Which assistants does Social X Post Card work with?
Its documentation mentions claude-code. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (3bfcf171063f), read on 2026-10-07. The repository is watched, and a new audit runs when it changes — this is the first audit.