hooks — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited hooks (Hook) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Your client wants 30 days of social content across six platforms with brand-faithful imagery, AI-generated video, and provenance signed for EU markets. You have five days. The last calendar got rejected because the product photo got "AI-enhanced" beyond recognition.
Run /socialforge:new-month → /socialforge:generate-all → /socialforge:review. Asset-first compositing keeps brand photos pixel-faithful while AI generates the scene around them. Per-platform copy adaptation handles Instagram + TikTok + LinkedIn + Threads + X + Facebook + YouTube Shorts in one pass. C2PA signing happens before review. No more "AI enhanced our logo into something else" disasters.
Open-source agency-grade social media production engine — 16 skills · 25 commands · 5 agents · 22 scripts · 10 HTTP MCP connectors · 0 global hooks. AI image (Vertex AI Nano Banana Pro), AI video (WaveSpeed Kling v3.0 Pro), human-in-the-loop review galleries. Built for agencies and in-house teams running monthly content calendars. Installs on Claude Code (CLI + IDE), Anthropic Cowork, OpenAI Codex, Cursor 2.5+, GitHub Copilot CLI, Google Antigravity 2.0, Hermes Agent, and OpenClaw + 35+ Agent Skills platforms. Created by Indranil Banerjee · LinkedIn · X.
🆕 Just shipped — v1.12.1 (June 9, 2026): Release-consistency test suite added (23 → 54 tests) — catches cross-manifest version drift, broken README anchors, stale install commands, and missing critical sections before they ship. v1.12.0 brought native Hermes Agent + OpenClaw support; SocialForge runs on 8 native platforms + 35+ Agent Skills clients. Full changelog →
# Install in Claude Code:
/plugin marketplace add indranilbanerjee/neels-plugins
/plugin install socialforge@neels-plugins
# Install on Hermes Agent (Nous Research):
hermes plugins install indranilbanerjee/socialforge
# Install on OpenClaw:
openclaw plugins install git:github.com/indranilbanerjee/socialforgeIf SocialForge saves your team time, give it a star ⭐ — it's the single thing that helps other agencies find it.
Status: Production Ready · 16 skills · 25 commands · 5 agents · 22 scripts · 10 HTTP MCP connectors · 0 global hooks
Agency-grade social media calendar automation with asset-first compositing and AI video generation. Takes monthly content calendars, matches brand assets, generates AI-composed creative, renders carousels, produces AI-generated video clips, adapts copy per platform, produces review galleries and delivery documents — with C2PA content provenance signed into every AI-generated image/video before delivery.
Brand assets are sacred. AI is the creative layer around them.
Product photos, headshots, screenshots — these are the brand’s real visual identity. AI generates backgrounds, mood, and context around them. The brand asset stays pixel-faithful in every composition.
| Mode | When | What Happens |
|---|---|---|
| ANCHOR_COMPOSE | Brand photo is the centerpiece | AI generates scene around the untouched asset |
| ENHANCE_EXTEND | Brand photo is the base | AI extends/enhances periphery, core stays faithful |
| STYLE_REFERENCED | No specific asset needed | AI generates using brand’s style reference photos as visual DNA |
| PURE_CREATIVE | Generic/abstract content | AI generates from text prompt + brand colors/mood |
1. /socialforge:brand-setup [brand-name] — Configure brand (5-10 min)
2. /socialforge:index-assets [brand-name] — Index brand photo library
3. /socialforge:new-month [brand] [YYYY-MM] — Start monthly production
4. /socialforge:generate-all — Produce all creative
5. /socialforge:review — Review and approve
6. /socialforge:finalize — Package for delivery| Platform | Install command | Manifest path | Status |
|---|---|---|---|
| Claude Code CLI + IDE extensions | /plugin install socialforge@neels-plugins | .claude-plugin/plugin.json | Full support (canonical) |
| Anthropic Cowork | Plugins UI → Add marketplace → indranilbanerjee/neels-plugins → Install SocialForge | same .claude-plugin/ files | Full support — no /plugin slash commands in Cowork (UI-only) |
| OpenAI Codex CLI + IDE + App | codex plugin marketplace add indranilbanerjee/neels-plugins then codex plugin install socialforge@neels-plugins | .codex-plugin/plugin.json (published OpenAI schema) | Full skills + MCP support |
| Cursor 2.5+ | In any Cursor Agent chat: /add-plugin socialforge@https://github.com/indranilbanerjee/socialforge | .cursor-plugin/plugin.json (verified Cursor 2.5+ JSON Schema) | Full skills + agents + commands support |
| GitHub Copilot CLI | copilot plugin marketplace add indranilbanerjee/neels-plugins then copilot plugin install socialforge@neels-plugins | .github/plugin/plugin.json (Copilot also recognizes .claude-plugin/plugin.json as fallback) | Full skills + MCP support |
| Google Antigravity 2.0 CLI + IDE | agy plugin install https://github.com/indranilbanerjee/socialforge | gemini-extension.json (at repo root, per Google's reference pattern) | Full skills + hooks support |
| Hermes Agent (Nous Research) — Desktop + CLI on macOS / Windows / Linux | hermes plugins install indranilbanerjee/socialforge | plugin.yaml + __init__.py at repo root (Hermes native spec) | Native plugin — adapter walks skills/ at register time and exposes all 16 skills via ctx.register_skill(). Targets Hermes Desktop v0.15.2+ (public preview June 2 2026). |
| OpenClaw (formerly Clawdbot / Moltbot) | openclaw plugins install git:github.com/indranilbanerjee/socialforge | openclaw.plugin.json at repo root (also auto-detects .claude-plugin/plugin.json as Claude-compatible bundle) | Native plugin via openclaw.plugin.json; skills field points at ./skills. |
Why this works: Agent Skills became an open standard in December 2025 (41+ agent products by June 2026). All 16 SKILL.md files in SocialForge are platform-portable as written.
Works on 35+ additional Agent Skills platforms without per-platform manifests — Goose (Block), OpenHands, OpenCode (sst), Junie (JetBrains), Gemini CLI, Roo Code, Cline/Windsurf, Kiro, Amp, Letta, Mux, Factory, Workshop, Tabnine, Mistral Vibe, and more. Point any Agent-Skills-compatible client at https://github.com/indranilbanerjee/socialforge/tree/main/skills and all 16 SocialForge skills are immediately discoverable.
hooks/hooks-reference.example.json. Credential status now via /socialforge:status on demand. See the release notes for the rationale.scripts/model_registry.json + resolve_model.py + refresh_models.py. Single source of truth for image / vision / video model ids; deprecated ids passed via --model / --video-model auto-fall-forward to their replacement; refresh_models.py polls live provider catalogs and reports drift. See docs/MODEL-CURATOR.md./plugin marketplace add indranilbanerjee/neels-plugins
/plugin install socialforge@neels-pluginsclaude plugins add github:indranilbanerjee/socialforgeclaude plugins add /path/to/socialforgeAfter installing the plugin, run the setup command in Claude Code:
/socialforge:setupThis configures two external API services that power SocialForge’s image and video generation:
Your admin provides you with:
/socialforge:setup copies these credentials to persistent storage (${CLAUDE_PLUGIN_DATA}), so they work across all sessions automatically. You only need to run it once.
Without running `/socialforge:setup`, image and video generation will not work. All other SocialForge features (calendar parsing, copy adaptation, review galleries, etc.) function normally without it.
If you see "/plugin isn't available in this environment" — you're in the standard Claude chat app (browser OR installed desktop app). The/pluginslash command is only supported in two environments: Claude Code (the developer CLI / IDE at claude.com/code,npm install -g @anthropic-ai/claude-code) and Anthropic Cowork. Everywhere else —claude.aiweb chat, the Claude Desktop app, mobile — plugins are managed through the UI, not slash commands.
>
The plugin IS installed (your SocialForge skills work); only the management command is unavailable. Fix:
>
1. In the chat UI — click the Plugins button at the bottom of the chat → Manage plugins → find SocialForge → look for Update / Refresh / Remove. If no Update button, Remove then Add plugin → re-install from indranilbanerjee/neels-plugins. The re-pull fetches the latest version. 2. For slash-command management — switch to Claude Code (CLI or IDE) or Cowork. The plugin runs identically across every Anthropic surface; you're choosing where to type management commands.>
Once you're in Claude Code or Cowork, the rest of this section applies.
Third-party marketplaces — including this one — have auto-update OFF by default in Claude Code. When v1.6.0 is the marketplace's latest and you're still on v1.5.3, nothing tells you. There is no banner, no badge, no notification.
Option 1 (recommended) — turn auto-update on, once:
Open /plugin, go to the Marketplaces tab, find neels-plugins, and toggle Enable auto-update. From then on, Claude Code refreshes the catalog at startup and pulls new SocialForge releases automatically. After an auto-update fires, run /reload-plugins when prompted to apply changes mid-session — no full restart, conversation context preserved.
Option 2 — manual update each time:
/plugin marketplace update neels-plugins
/plugin uninstall socialforge@neels-plugins
/plugin install socialforge@neels-plugins
/reload-plugins/plugin marketplace update only refreshes the catalog — it does not bump installed plugin versions. The uninstall + reinstall is what actually pulls the new version.
Force-reinstall (version unchanged but content changed):
rm -rf ~/.claude/plugins/cache/neels-plugins
/plugin install socialforge@neels-plugins
/reload-pluginsCowork is the Anthropic Desktop computer-use product (macOS/Windows). It supports third-party plugins from custom marketplaces — same /plugin marketplace add indranilbanerjee/neels-plugins install pattern. Cowork has local filesystem access, so the full SocialForge pipeline including all 19 Python scripts (image generation, video generation, ffmpeg postprocessing, C2PA signing) runs natively. The only Cowork-specific limitation is HTTP MCPs only (no stdio/npx) — SocialForge's 10 connectors are all HTTP and fully Cowork-compatible.
SocialForge uses Google Cloud Vertex AI for image generation. Without it, image generation will fail (it will NOT silently create placeholders).
Setup via /socialforge:setup (recommended):
/socialforge:setup and point it to the JSON key fileAlternative — Direct environment variable: If you prefer manual configuration, set the GOOGLE_APPLICATION_CREDENTIALS environment variable to point to your service account JSON file:
export GOOGLE_APPLICATION_CREDENTIALS=/path/to/service-account.jsonAlternative — fal.ai or Replicate: Connect via Connectors panel after installation for third-party image generation.
Run /socialforge:status to verify image and video generation credentials are configured. (As of v1.5.0, credential status is reported on demand instead of via a SessionStart banner that fired on every Claude Code launch in every project.)
Admins configure the cloud accounts once. Team members then just run /socialforge:setup with the credentials the admin shares.
#### Step 1: Create a Google Cloud Project
#### Step 2: Enable Billing
#### Step 3: Enable Vertex AI API
#### Step 4: Create a Service Account
socialforge-image-genSocialForge AI image generation#### Step 5: Download the JSON Key File
socialforge-image-gen#### Step 6: Share with Your Team Share the downloaded JSON file with your team via:
NEVER commit this file to Git. NEVER share it publicly.
Cost: Image generation costs approximately $0.01-0.04 per image depending on resolution and model. All costs go to the admin’s billing account.
#### Step 1: Create a WaveSpeed Account
#### Step 2: Add Credits
#### Step 3: Create an API Key
#### Step 4: Share with Your Team Share the API key string with your team via:
NEVER commit this key to Git or paste it in public forums.
Cost: All video generation costs go to the admin’s WaveSpeed account. Monitor usage at https://wavespeed.ai/dashboard
HiggsField provides additional resilience. If both Vertex AI and WaveSpeed are down, HiggsField can generate images and videos.
#### Step 1: Create a HiggsField Account
#### Step 2: Get API Credentials
#### Step 3: Share with Your Team Share both the API key AND secret with your team. Both are needed for authentication.
Team members do NOT need any cloud accounts. The admin shares credentials, and the team member runs:
/socialforge:setupThe setup wizard asks for:
Credentials are stored in the plugin’s persistent data directory. They survive across sessions, restarts, and plugin updates.
Where credentials are stored per platform:
%APPDATA%\Claude\plugins\data\socialforge-neels-plugins\socialforge\~/Library/Application Support/Claude/plugins/data/socialforge-neels-plugins/socialforge/~/.config/Claude/plugins/data/socialforge-neels-plugins/socialforge/Or if using the fallback workspace: ~/socialforge-workspace/
SocialForge produces short-form AI-generated video clips for video content posts (Reels, TikTok, Shorts, etc.).
| Component | Model | Provider |
|---|---|---|
| Keyframe images | Gemini Nano Banana 2 / Pro | Google Cloud Vertex AI |
| Image-to-video | Kling v3.0 Pro | WaveSpeed |
After generation, videos are automatically post-processed with:
Post-processing is powered by ffmpeg, auto-installed via the imageio-ffmpeg Python package.
All video generation goes through human-in-the-loop approval. Videos are generated, previewed in the review gallery, and require explicit approval before finalization. Nothing ships without sign-off.
/socialforge:setup/socialforge:setup (for keyframe generation)pip install google-genai wavespeed Pillow imageio-ffmpegUse /socialforge:generate-video to produce video for a specific post, or /socialforge:generate-all to include video posts in batch production.
SocialForge ships with 10 HTTP connectors that work in both Cowork and Claude Code: Notion, Canva, Slack, Gmail, Google Calendar, Figma, fal.ai, Replicate, Asana, Cloudinary.
The plugin works fully without connectors — all skills, agents, and creative production function with local assets and AI generation APIs.
Brand configs and asset indexes persist across sessions via ${CLAUDE_PLUGIN_DATA}. Asset images stay in Google Drive, Cloudinary, or local folders. See the User Guide for details.
Multi-harness expansion: native Hermes Agent + native OpenClaw + 23-test stdlib suite — June 9, 2026. Brings SocialForge to parity with DMP's 8-platform native support. New plugin.yaml + __init__.py at repo root for Hermes (walks skills/ at register time, exposes all 16 SF skills via ctx.register_skill() — stdlib only, defensive coding, never raises). New openclaw.plugin.json at repo root for OpenClaw native install (id + configSchema + skills: ["./skills"]). New tests/ directory with 23 stdlib-unittest tests covering plugin.yaml schema, adapter import + register, mock ctx integration, graceful degradation on bad ctx/None, cross-manifest version consistency. Install: hermes plugins install indranilbanerjee/socialforge or openclaw plugins install git:github.com/indranilbanerjee/socialforge. Zero impact on existing platforms — each reads only its own manifest path.
skills/c2pa-sign/SKILL.md updated for C2PA Content Credentials 2.3 (released 9 February 2026) expanded format support: live video for broadcast/streaming, plain text documents, OGG Vorbis audio, large AVI video files, EXIF Original Preservation Images. Relevant for Reels / TikTok / Shorts streaming workflows and product photography preservation. Also added C2PA Spec 2.4 (April 2026) AI Disclosure Assertion (`c2pa.ai-disclosure`) — machine-readable AI transparency info that the EU AI Act Article 50 deployer pathway will read. When c2pa_sign.py is on a C2PA SDK ≥ 0.36, embed the assertion alongside existing IPTC + schema.org tags. Trust List now via the public C2PA Conformance Program.
Trimmed install-UI descriptions to ~150 chars across all 5 platform manifests. Rewrote README hero pain-first. Added platform-skill GitHub topics. Inserted context-efficiency callouts in all 10 heaviest skills (grep-before-read pattern, ${CLAUDE_PLUGIN_DATA} directory-list-before-open, offset+limit on partial reads).
Model curator + correctness sweep. Adds the shared model-selection infrastructure (scripts/model_registry.json + resolve_model.py + refresh_models.py, see docs/MODEL-CURATOR.md) so model ids are no longer hardcoded across image / edit / vision / video scripts. Replaced deprecated gemini-2.0-flash (×1), gemini-2.0-flash-exp-image-generation (×1), and veo-2.0-generate-001 (×2) with curator-resolved defaults; added --model / --video-model / --list-models flags. Fixed the dead cloud.higgsfield.ai/api-keys URL in README + setup SKILL. Replaced dead gmail.mcp.claude.com / gcal.mcp.claude.com / drive.mcp.claude.com MCP URLs with the working Google-hosted equivalents. Swept shorthand /sf:X slash refs to canonical /socialforge:X. Fixed a pre-existing arg-order bug in the Kling call site (aspect_ratio was being passed as duration).
Polish + discoverability + community-standards pass. Adds Star History, community-standards files (CODE_OF_CONDUCT.md, SECURITY.md, PR + Issue templates), rewrites the README hero with social-proof badges + maintainer block (indranil.in + linkedin.com/in/askneelnow + @askneelnow), fixes stale asset counts (15→16 skills, 19→22 scripts) across README, and expands plugin.json keywords from 17 → 47 for marketplace search.
Ships verified-real native manifests for OpenAI Codex (.codex-plugin/plugin.json per the published OpenAI schema), Google Antigravity 2.0 (gemini-extension.json at repo root per Google's gemini-cli-extensions/data-agent-kit-starter-pack reference pattern), Cursor 2.5+ (.cursor-plugin/plugin.json per the verified Cursor JSON Schema), and GitHub Copilot CLI (.github/plugin/plugin.json per the verified GitHub schema). Adds AGENTS.md at root (auto-loaded by Codex + Antigravity + Copilot + Cursor agent context chains). All 16 skills share via the Agent Skills open standard — no duplication.
v1.7.0 added invented .codex-plugin/plugin.json + .cursor-plugin/plugin.json and v1.8.0 added invented .antigravity/plugin.json + an unverified GitHub Copilot CLI auto-discovery claim. All four were removed in v1.8.5 after a May 2026 research pass confirmed those manifests did not match the platforms' actual install specs. v1.9.0 then ships the REAL native manifests against the verified published schemas — see the v1.9.0 entry above.
EU AI Act Article 50 readiness (applicable 2 Aug 2026). New scripts/c2pa_sign.py wraps c2pa-python>=0.32 to embed machine-readable provenance manifests in AI-generated assets — brand (CreativeWork.author), generator name, prompt, target platform, IPTC digital-source-type. New /socialforge:c2pa-sign skill exposes it. Optional --c2pa-sign flag on generate_image.py (post-image-generation step) and video_postprocess.py (post-per-platform-resize step) auto-signs before delivery. Empirically tested: 75-byte test PNG → ~43 KB signed PNG with manifest_embedded_and_verified=true. Production deployment requires a CAI-recognized signing certificate (Adobe Content Credentials, Truepic, Numbers Protocol, or Microsoft Azure Confidential Ledger) — see references/c2pa-production-cert.md.
May 2026 channel pack added at references/channel-changes-may-2026.md — TikTok USDS Joint Venture (post-Jan 22 2026; AI creator labeling mandatory, AI content excluded from Creator Rewards Program, daily shoppable-post limits May 11 2026), LinkedIn March 12 2026 algorithm + Depth Score (external links and engagement bait penalized ~60%), Apple MPP affects ~64% of B2C opens (open rate dropped as primary KPI), YouTube AI Shorts labeling, Sora deprecation timeline (consumer app 26 Apr 2026, API 24 Sep 2026 → default to Runway Gen-4 / Veo 3.x / Kling 3.0). Third-party cookies deprecation cancelled.
Engineering spec correction — SOCIALFORGE-COMPLETE-ENGINEERING-SPEC.md section 16.3: Sora 2 row marked DEPRECATED; Runway Gen-4 and Kling 3.0 Omni added as replacements.
README correctness — Updating section rewritten to mirror DMP/CF pattern; explicit two-option flow since third-party marketplaces have auto-update OFF by default in Claude Code; new "Installs in Cowork" subsection clarifying that the full SF pipeline including all 20 Python scripts runs natively in Cowork.
v1.5.0 removed all 4 global hooks (SessionStart credential banner, PreToolUse Write/Edit compliance check, SubagentStart brand-context injection, Stop image-approval verification) that previously fired on every Claude Code operation in every project. Credential status reported on demand via /socialforge:status. v1.5.1 hardened the plugin manifest. v1.5.2 fixed manifest install format. v1.5.3 swept all /sf: shorthand to canonical /socialforge: across ~200 references.
100% spec coverage. Persistent storage via ${CLAUDE_PLUGIN_DATA}, Google Drive asset source, Cloudinary DAM, Veo 3.1 video generation, edge feathering, color temp matching, PDF carousel assembly, Instagram first-comment strategy, bilingual copy support.
SocialForge is built and maintained by [Indranil Banerjee](https://indranil.in) — a digital marketing practitioner shipping social-creative automation as code. The asset-first compositing principle ("brand assets are sacred, AI is the creative layer around them") and the four creative modes come from real agency work producing monthly content calendars at scale.
If SocialForge saves your team time, ⭐ star the repo. Sharing on LinkedIn (linkedin.com/in/askneelnow) or X (@askneelnow) helps too — tag me, I'll re-share.
PRs welcome — especially on the four creative modes, platform-specific copy adaptation rules, and AI image/video model integrations. See CONTRIBUTING.md for the workflow, .github/PULL_REQUEST_TEMPLATE.md for the PR checklist, and TESTING-GUIDE.md for the test plan. All contributors are expected to follow the Code of Conduct. Security issues: use Private Security Advisories per SECURITY.md — do not file public issues for vulnerabilities.
SocialForge is part of the Neelverse Marketing Suite by Indranil Banerjee — three plugins that work together for end-to-end marketing:
| Plugin | What It Does | Install |
|---|---|---|
| [Digital Marketing Pro](https://github.com/indranilbanerjee/digital-marketing-pro) | End-to-end engagement methodology — 12-Part Strategy Flow, Four Core Documents, Two-Views Model. 150 skills, 25 agents, 10 commands, 14 HTTP connectors | /plugin install digital-marketing-pro@neels-plugins |
| [ContentForge](https://github.com/indranilbanerjee/contentforge) | Publication-ready content via 11-phase pipeline — research, fact-check, draft, SEO, humanize, .docx export with C2PA signing | /plugin install contentforge@neels-plugins |
| SocialForge (this plugin) | Social media calendar automation with AI image + video generation (Vertex AI Nano Banana Pro + WaveSpeed Kling v3.0 Pro), C2PA signing | /plugin install socialforge@neels-plugins |
Use together: Plan campaigns in DM Pro, produce articles with ContentForge, create social visuals and videos with SocialForge. All share the same brand profiles and marketplace.
claude plugin marketplace add indranilbanerjee/neels-plugins
claude plugin install digital-marketing-pro@neels-plugins
claude plugin install contentforge@neels-plugins
claude plugin install socialforge@neels-pluginsMIT — see LICENSE. Free to use commercially.
<sub>Made with care by Indranil Banerjee · MIT-licensed · ⭐ Star the repo if it helps you</sub>
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.