Borrowing it
Nothing to install: this file belongs to claude-world/claude-world-studio. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/claude-world/claude-world-studio/main/.claude/skills/threads-viral-agent/SKILL.mdgit clone --depth 1 https://github.com/claude-world/claude-world-studioWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/claude-world/claude-world-studio/threads-viral-agent)<a href="https://agentmods.dev/skills/claude-world/claude-world-studio/threads-viral-agent"><img src="https://agentmods.dev/badge/skills/claude-world/claude-world-studio/threads-viral-agent/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/claude-world/claude-world-studio/threads-viral-agent"><img src="https://agentmods.dev/badge/skills/claude-world/claude-world-studio/threads-viral-agent.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 4 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 415 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- high Supply Chain · line 416 Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.Fix: Avoid downloading and executing remote scripts. Use trusted packages from PyPI/npm. If remote fetch is required, verify checksums and use HTTPS.
- medium Data Exfiltration · line 416 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
- medium Data Exfiltration · line 420 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00159 | $0.09512 |
| Opus 5.5 | $0.00064 | $0.03805 |
| Sonnet 5.5 | $0.00032 | $0.01902 |
| Haiku 4.5 | $0.00016 | $0.00951 |
Grade A, and why
threads-viral-agent scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -F "reqtype=fileupload" -F "time=24h" -F "fileToUpload=@/tmp/slide-1.png" \ How it starts
The opening of the file, as written. The whole thing — 593 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Meta 3-Platform Viral Agent
Autonomous agent: trend discovery → source verification → patent-optimized creation → quality gate → publishing.
Core Principle: MCP provides briefs/frameworks, LLM creates original content, scripts handle publishing.
Accounts & Tokens
Account IDs and tokens live in .env at skill root (auto-loaded by all scripts, no
manual export needed). Each account is addressed by a suffix — CW, LF — and the
scripts read every value from the environment, never from this file:
| Suffix | Threads user ID | Threads token | IG user ID | IG token |
|---|---|---|---|---|
CW |
THREADS_USER_CW |
THREADS_TOKEN_CW |
IG_USER_CW |
IG_TOKEN_CW |
LF |
THREADS_USER_LF |
THREADS_TOKEN_LF |
IG_USER_LF |
IG_TOKEN_LF |
- App ID:
THREADS_APP_ID - Token expiry: 60 days
- Renew:
python3 scripts/threads_oauth.py auth-url→ authorize →full --code CODE - Select account:
--account cwor--account lf
MCP Tools (3 servers, 34 tools)
trend-pulse (11 tools) — 趨勢發現 + 內容優化框架
| Tool | Purpose | When to use |
|---|---|---|
get_trending(sources, geo, count, save) |
即時趨勢，20 個免費來源 | Step 1: 找主題 |
search_trends(query, sources, geo) |
關鍵字搜尋跨來源 | Step 1: 搜特定話題 |
list_sources() |
可用來源及 rate limit | 確認哪些來源可用 |
get_trend_history(keyword, days, source) |
歷史趨勢數據 | Step 3: 驗證話題熱度變化 |
take_snapshot(sources, geo, count) |
存快照到 DB，追蹤 velocity | 定期追蹤趨勢加速度 |
get_content_brief(topic, content_type, platform, lang) |
寫作指南：hook/CTA/策略 | Step 4a: 取 brief |
get_scoring_guide(lang, topic) |
5 維度評分框架 | Step 5: 自評分數 |
get_review_checklist(platform, lang, topic) |
審稿清單 | Step 5: 品質門檻 |
get_platform_specs(platform, lang) |
平台規格（字數/功能/演算法） | Step 4d: 平台適配 |
get_reel_guide(style, duration, lang, topic) |
Reel/短影片腳本指南 | 做 Reel 時 |
render_page(url, format) |
CF Browser 渲染頁面（markdown/content/json） | Step 2: 讀 JS-heavy 頁面 |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago Changed · +2 lines 2e225b278d25
- 1mo ago First seen · 591 lines · 159 tokens per session scan A 769b50d2034d
threads-viral-agent is a skill published in the GitHub repository claude-world/claude-world-studio (71 stars, last pushed 5d ago), licensed MIT. It adds 159 tokens to every session and 9,512 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
notebooklm-research
Automate source-grounded research with Google NotebookLM. Create notebooks from URLs, text, or local files; ask cited questions; run fast or deep web research; create articles and social drafts; and generate or download audio, video, cinematic video, slides, reports, study guides, quizzes, flashcards, mind maps…
notebooklm
Install, authenticate, troubleshoot, and operate Gemini Notebook through the notebooklm-py CLI or typed async Python API. Use for notebook and source management, grounded chat and research, and artifact generation or download when the user mentions Gemini Notebook, notebooklm-py, the notebooklm CLI, or its Python API.…
surfsense-documents
Make or change a Word document (.docx), a PDF, a PowerPoint deck (.pptx) or an Excel workbook (.xlsx) by writing a Python script that surfsenserenderdocument runs, optionally starting from a source's own Word or PowerPoint file. Load it whenever the user asks for one of these, or for a change to one you made.
surfsense-html
Make or change a web page from the user's sources - a report, a briefing, a dashboard, a comparison, a timeline, an explainer, an interactive calculator or a figure that shows how something works - by writing an HTML file and keeping it with surfsensesavepage. Load it whenever the user asks for a web page, an HTML…
surfsense-data
Work out numbers from spreadsheet and CSV sources (.xlsx, .csv, .tsv) by writing a pandas script that surfsenseanalyzedata runs: totals, averages, trends, rankings, comparisons, cleaning, and charts that can go into a document. Load it whenever the user asks for figures from a table, or a chart of one.
surfsense-pdf
Work on PDFs the user has, or PDFs in Studio, without changing them - merge, take out, split, turn or reorder pages, add a watermark, page numbers, a header or a footer, and list or fill a form's fields. Load it whenever the user asks for one of these on a PDF.