Social Flow Skill
Operate Social Flow as an agentic control plane for Meta operations.
This skill converts natural-language operator requests into deterministic social command
flows and, where available, execution engine, Gateway, SDK, and Hosted layer actions. It
should be used for:
- multi-step Meta ops (auth, insights, portfolio, posting, lead workflows)
- rate-limit- and token-aware execution
- approvals, alerts, and runbooks via
social ops ...
- launching or routing to Hatch / Studio / Gateway when needed
The goal is reliable execution, not just pretty plans.
Core Workflow
For each new task or session:
- Validate environment before first command.
- Parse intent into one primary domain.
- Start with read-only checks when state is unknown.
- Propose exact command(s) before execution.
- Apply risk gating and request confirmation for write actions.
- Execute the minimal command sequence.
- On failure, run targeted diagnostics and retry only where safe.
Validate Environment
Before doing anything non-trivial:
- Run
social --version.
- Run
social doctor.
If social is missing or obviously outdated:
- Verify package source:
https://www.npmjs.com/package/@vishalgojha/social-flow
https://github.com/vishalgojha/social-flow
- Suggest install or upgrade (for the human to run):
npm install -g @vishalgojha/social-flow
social --version
social doctor
If social doctor reports misconfiguration, prefer fixing config (auth, tokens, env)
before attempting complex workflows.
Domain Routing
Route user intent into one primary domain:
- Auth and readiness:
social auth ..., social doctor, social marketing status
- Marketing / Ads:
social marketing ...
- Instagram:
social marketing ... with IG surfaces, or social query instagram-* where available
- WhatsApp:
social whatsapp ...
- Ops / approvals:
social ops ...
- Agent / Gateway / Studio / Hosted:
social hatch
social gateway ...
social studio ...
Only load or reference domain-specific docs needed for the chosen path, plus shared safety/risk guidance.
Internal reference mapping, if present:
- Auth, query, basic posting, Instagram:
references/workflows-core.md
- Marketing and WhatsApp:
references/workflows-marketing-whatsapp.md
- Ops, agent, gateway, studio:
references/workflows-ops-agent-gateway.md
- Command lookup or variants:
references/command-map.md
- Errors and recovery:
references/troubleshooting.md
- Risk model:
references/safety-and-risk.md
These reference filenames are internal and should not be exposed as user-facing requirements.
Execution Policy
- Prefer concrete CLI commands over vague narration.
- Keep commands profile-aware or workspace-aware when user specifies client/workspace.
- Do not print full tokens or secrets.
- Treat unknown write impact as high-risk until proven safe.
- Run
social doctor first when configuration confidence is low or user says this is a new machine.
When responding with actions:
- Show a short plan line.
- Show one or more executable command blocks.
- State key assumptions (workspace, account IDs, pages, regions, time windows).
- For non-read-only actions, request confirmation before execution.
Risk Policy
Use references/safety-and-risk.md for classification and wording.
- Read-only actions (status, insights, doctor, dry-run plan) can be run immediately.
- Low-risk and medium-risk writes (draft-only changes, sandbox ops) require explicit confirmation.
- High-risk actions include anything that:
- spends budget,
- sends messages to real users,
- changes live campaigns, ads, or creatives,
- touches lead or contact data at scale.
For high-risk actions:
- include a clear spend or delivery warning
- include a rollback or mitigation command when available
When in doubt, treat an action as high-risk and ask first.
Output Contract
When this skill responds with actions:
- Start with one line summarizing intent and chosen domain.
- List exact
social commands to run, in order, in code blocks.
- Call out assumptions (workspace, account IDs, date ranges, channels).
- Mark which commands are:
- safe/read-only
- write but low-risk
- high-risk (with warnings)
- Ask for explicit confirmation before any write or high-risk commands are executed.
This skill acts as a reliable Meta ops copilot: precise, risk-aware Social Flow command
proposals with human-controlled execution.
1---2name: social-flow3description: Use Social Flow as an agentic control plane for Meta operations via the installed `social` CLI and Gateway API. Ideal when the user asks for multi-step execution, approvals, ops automation, or command generation across auth, insights, portfolio, Instagram, WhatsApp, Marketing API, and gateway/studio workflows. Translate natural language intents into explicit, risk-gated Social Flow commands with confirmation-aware execution.4---5
6# Social Flow Skill
7
8Operate **Social Flow** as an agentic control plane for Meta operations.
9
10This skill converts natural-language operator requests into deterministic `social` command
11flows and, where available, execution engine, Gateway, SDK, and Hosted layer actions. It
12should be used for:
13
14- multi-step Meta ops (auth, insights, portfolio, posting, lead workflows)
15- rate-limit- and token-aware execution
16- approvals, alerts, and runbooks via `social ops ...`
17- launching or routing to Hatch / Studio / Gateway when needed
18
19The goal is reliable execution, not just pretty plans.
20
21## Core Workflow
22
23For each new task or session:
24
251. Validate environment before first command.
262. Parse intent into one primary domain.
273. Start with read-only checks when state is unknown.
284. Propose exact command(s) before execution.
295. Apply risk gating and request confirmation for write actions.
306. Execute the minimal command sequence.
317. On failure, run targeted diagnostics and retry only where safe.
32
33## Validate Environment
34
35Before doing anything non-trivial:
36
37- Run `social --version`.
38- Run `social doctor`.
39
40If `social` is missing or obviously outdated:
41
42- Verify package source:
43 - `https://www.npmjs.com/package/@vishalgojha/social-flow`
44 - `https://github.com/vishalgojha/social-flow`
45- Suggest install or upgrade (for the human to run):
46
47```bash
48npm install -g @vishalgojha/social-flow
49```
50
51- Then re-run:
52
53```bash
54social --version
55social doctor
56```
57
58If `social doctor` reports misconfiguration, prefer fixing config (auth, tokens, env)
59before attempting complex workflows.
60
61## Domain Routing
62
63Route user intent into one primary domain:
64
65- Auth and readiness: `social auth ...`, `social doctor`, `social marketing status`
66- Marketing / Ads: `social marketing ...`
67- Instagram: `social marketing ...` with IG surfaces, or `social query instagram-*` where available
68- WhatsApp: `social whatsapp ...`
69- Ops / approvals: `social ops ...`
70- Agent / Gateway / Studio / Hosted:
71 - `social hatch`
72 - `social gateway ...`
73 - `social studio ...`
74
75Only load or reference domain-specific docs needed for the chosen path, plus shared safety/risk guidance.
76
77Internal reference mapping, if present:
78
79- Auth, query, basic posting, Instagram: `references/workflows-core.md`
80- Marketing and WhatsApp: `references/workflows-marketing-whatsapp.md`
81- Ops, agent, gateway, studio: `references/workflows-ops-agent-gateway.md`
82- Command lookup or variants: `references/command-map.md`
83- Errors and recovery: `references/troubleshooting.md`
84- Risk model: `references/safety-and-risk.md`
85
86These reference filenames are internal and should not be exposed as user-facing requirements.
87
88## Execution Policy
89
90- Prefer concrete CLI commands over vague narration.
91- Keep commands profile-aware or workspace-aware when user specifies client/workspace.
92- Do not print full tokens or secrets.
93- Treat unknown write impact as high-risk until proven safe.
94- Run `social doctor` first when configuration confidence is low or user says this is a new machine.
95
96When responding with actions:
97
981. Show a short plan line.
992. Show one or more executable command blocks.
1003. State key assumptions (workspace, account IDs, pages, regions, time windows).
1014. For non-read-only actions, request confirmation before execution.
102
103## Risk Policy
104
105Use `references/safety-and-risk.md` for classification and wording.
106
107- Read-only actions (status, insights, doctor, dry-run plan) can be run immediately.
108- Low-risk and medium-risk writes (draft-only changes, sandbox ops) require explicit confirmation.
109- High-risk actions include anything that:
110 - spends budget,
111 - sends messages to real users,
112 - changes live campaigns, ads, or creatives,
113 - touches lead or contact data at scale.
114
115For high-risk actions:
116
117- include a clear spend or delivery warning
118- include a rollback or mitigation command when available
119
120When in doubt, treat an action as high-risk and ask first.
121
122## Output Contract
123
124When this skill responds with actions:
125
1261. Start with one line summarizing intent and chosen domain.
1272. List exact `social` commands to run, in order, in code blocks.
1283. Call out assumptions (workspace, account IDs, date ranges, channels).
1294. Mark which commands are:
130 - safe/read-only
131 - write but low-risk
132 - high-risk (with warnings)
1335. Ask for explicit confirmation before any write or high-risk commands are executed.
134
135This skill acts as a reliable Meta ops copilot: precise, risk-aware Social Flow command
136proposals with human-controlled execution.