setup — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited setup (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
One-time setup that stores credentials persistently. Run once, works forever across all sessions.
Asset-heavy skill. Grep before Read the asset catalog (${CLAUDE_PLUGIN_DATA}/<brand>/assets/index.json) — never list the asset directory. Reference generated images / videos by path, not by loading metadata. Brand profile loads once per session.
Configures two services that SocialForge needs for creative production:
Your admin provides you with:
If you are the admin, see the Admin Setup section below.
/socialforge:setupRun this first — installs all required Python packages:
python3 "${CLAUDE_PLUGIN_ROOT}/scripts/install_deps.py"This auto-installs: google-genai (Vertex AI), wavespeed (Kling video), Pillow (compositing), imageio-ffmpeg (video post-processing), playwright (carousels).
If any package fails, show the manual install command and continue.
Check if already configured:
python3 "${CLAUDE_PLUGIN_ROOT}/scripts/credential_manager.py" statusIf not configured, ask:
Image Generation Setup (Google Cloud Vertex AI)
Do you have a Google Cloud service account JSON file?
Provide the full file path (e.g., C:\Users\you\Downloads\socialforge-credentials.json)
Or type "skip" to configure later (image generation will not work).When user provides the path:
python3 "${CLAUDE_PLUGIN_ROOT}/scripts/credential_manager.py" setup-vertex --json-path "<user-provided-path>"Show the result. If success:
Image generation configured.
Project: <project_id>
Service Account: <email>
Models available: gemini-2.5-flash-image (Nano Banana 2), gemini-3-pro-image-preview (Nano Banana Pro)Video Generation Setup (WaveSpeed / Kling v3.0)
Do you have a WaveSpeed API key?
Paste the key here
Or type "skip" to configure later (video generation will not work).When user provides the key:
python3 "${CLAUDE_PLUGIN_ROOT}/scripts/credential_manager.py" setup-wavespeed --api-key "<user-provided-key>"Show the result. If success:
Video generation configured.
Provider: WaveSpeed (Kling v3.0 Pro)
Models: image-to-video, text-to-video (3-15 seconds)HiggsField Setup (Optional — adds fallback resilience)
Do you have a HiggsField API key and secret?
→ Paste the API key, then the API secret
Or type "skip" (HiggsField is optional — Vertex AI and WaveSpeed are sufficient).When user provides both:
python3 "${CLAUDE_PLUGIN_ROOT}/scripts/credential_manager.py" setup-higgsfield --api-key "<key>" --api-secret "<secret>"SocialForge API Setup Complete
Image Generation: [configured / not configured]
Provider: Google Cloud Vertex AI
Project: <project_id>
Models: Nano Banana 2, Nano Banana Pro
Video Generation: [configured / not configured]
Provider: WaveSpeed (Kling v3.0 Pro)
Modes: image-to-video, text-to-video
HiggsField: [configured / skipped]
Provider: HiggsField (Soul v2 + Kling v2.1, fallback)
Credentials stored persistently. No further setup needed.
Next: /socialforge:brand-setup [brand-name] to configure your first brand.| Argument | Effect |
|---|---|
| (none) | Run full interactive setup |
--image | Configure image generation only (Vertex AI) |
--video | Configure video generation only (WaveSpeed) |
--fallback | Configure HiggsField fallback only |
--status | Show current configuration status |
--reset | Remove all stored credentials and start fresh |
If you are setting up the cloud accounts for your team, follow these detailed guides.
#### Step 1: Create a Google Cloud Project
#### Step 2: Enable Billing
#### Step 3: Enable Vertex AI API
#### Step 4: Create a Service Account
socialforge-image-genSocialForge AI image generation#### Step 5: Download the JSON Key File
socialforge-image-gen#### Step 6: Share with Your Team Share the downloaded JSON file with your team via:
NEVER commit this file to Git. NEVER share it publicly.
Cost: Image generation costs approximately $0.01-0.04 per image depending on resolution and model. All costs go to the admin's billing account.
#### Step 1: Create a WaveSpeed Account
#### Step 2: Add Credits
#### Step 3: Create an API Key
#### Step 4: Share with Your Team Share the API key string with your team via:
NEVER commit this key to Git or paste it in public forums.
Cost: All video generation costs go to the admin's WaveSpeed account. Monitor usage at https://wavespeed.ai/dashboard
HiggsField provides additional resilience. If both Vertex AI and WaveSpeed are down, HiggsField can generate images and videos.
#### Step 1: Create a HiggsField Account
#### Step 2: Get API Credentials
#### Step 3: Share with Your Team Share both the API key AND secret with your team. Both are needed for authentication.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.