Skills agent-tools

📦

agent-tools

Name: agent-tools
Author: 101-skills

Content revision r1 Critical 🌐 Network access🔑 Env variables📁 Filesystem access⚙️ External commands

Run Cloud AI Apps from Your Agent

Managing separate AI APIs and workflows slows production. This skill guides Claude, Codex, and Claude Code through inference.sh discovery, execution, uploads, and task tracking.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Do not auto-install this skill.

The canonical policy requires operator review before any installation action.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "agent-tools" from https://skillstore.io/skills/101-skills-agent-tools.md and its manifest at https://skillstore.io/api/skills/101-skills-agent-tools/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/101-skills-agent-tools.md Signed manifest GET /api/skills/101-skills-agent-tools/manifest Signed lockfile GET /api/skills/101-skills-agent-tools/lockfile

Test it

Using "agent-tools". Find an image generator suitable for a landscape product banner.

Expected outcome:

Recommended app: FLUX development model
Required input: a detailed image prompt
Optional input: landscape dimensions and image count
Next step: review the prepared request before execution

Using "agent-tools". Create a short video from my approved image and track it without waiting.

Expected outcome:

The selected video app accepted the image after upload confirmation. The task was submitted, tracked to completion, and its download location was reported.

Using "agent-tools". Search for recent AI platform news.

Expected outcome:

The search application returned a concise source list with titles, publication details, and links for manual review.

Security Audit

Critical

v5 • 7/12/2026 Open versioned report

The documentation contains four remote installer commands that pipe downloaded content directly into a shell, plus an unpinned package installation and a remote-data command substitution. Most other detections are Markdown examples, documentation links, placeholder credentials, or intentional user-selected paths. The skill also permits automatic cloud uploads and social account changes without requiring explicit confirmation.

Files scanned

599

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (6)

Critical

references/authentication.md:6

Pipe to shell pattern

curl -fsSL https://cli.inference.sh | sh

The command downloads mutable remote content and executes it immediately in a shell. A compromised host, route, or installer can execute arbitrary code.

Critical

references/authentication.md:44

Pipe to shell pattern

curl -fsSL https://cli.inference.sh | sh

The reinstall command executes remote content without allowing local inspection or independent verification. Compromise of the delivery path would provide arbitrary shell execution.

Critical

references/cli-reference.md:6

Pipe to shell pattern

curl -fsSL https://cli.inference.sh | sh

The installation command directly executes a script downloaded from the network. It provides no pre-execution inspection or independently pinned integrity check.

Critical

SKILL.md:18

Pipe to shell pattern

curl -fsSL https://cli.inference.sh | sh

The primary setup instructions execute an unaudited network response directly in the user's shell. A delivery compromise would permit arbitrary code execution.

High

SKILL.md:51-52 SKILL.md:98

Unconfirmed Social Account Actions

The skill exposes commands that can publish posts and identifies direct messages, follows, likes, and reposts as available actions. It provides no requirement to preview or confirm these external side effects.

The listed capabilities directly modify a connected social account, while the skill contains no confirmation or preview guardrail.

Medium

references/running-apps.md:21-42 SKILL.md:58-73

Automatic Local File Upload Without Confirmation

The skill states that local paths are automatically uploaded to cloud apps, including absolute, parent-directory, and home-directory paths. It does not require confirmation before transferring user files.

Both files explicitly document automatic uploads from local paths to cloud applications, and neither includes a confirmation requirement.

Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

SKILL.md:28

Shell command substitution

> curl -LO $(curl -fsSL https://dist.inference.sh/cli/manifest.json | grep -o '"url":"[^"]*"' | grep

The shell expands a URL parsed from a mutable remote manifest and passes it to curl. The same origin supplies checksums, so compromise can redirect and validate a malicious download.

Medium

SKILL.md:7

Ruby/shell backtick execution

> **Install the belt CLI skill:** `npx skills add belt-sh/cli`

The inline Markdown contains an actual npx installation command for an unpinned remote skill. Running it introduces package and skill supply-chain execution risk.

Risk Factors

🌐 Network access (17)

references/authentication.md:6 references/authentication.md:44 references/cli-reference.md:6 references/running-apps.md:152 SKILL.md:9 SKILL.md:13 SKILL.md:18 SKILL.md:22 SKILL.md:27 SKILL.md:28 SKILL.md:140 SKILL.md:141 SKILL.md:142 SKILL.md:143 SKILL.md:144 SKILL.md:145 SKILL.md:146

🔑 Env variables (3)

references/authentication.md:30 references/authentication.md:53 references/cli-reference.md:79

📁 Filesystem access (5)

references/cli-reference.md:91 references/cli-reference.md:91 references/running-apps.md:41 SKILL.md:33 SKILL.md:33

⚙️ External commands (21)

Detected Patterns

Pipe to shell pattern×4

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/101-skills-agent-tools/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/101-skills-agent-tools/security.svg)](https://skillstore.io/skills/101-skills-agent-tools?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/101-skills-agent-tools?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/101-skills-agent-tools/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/101-skills-agent-tools.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

101-skills. (2026). agent-tools security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/101-skills-agent-tools/audits/5

BibTeX citation

@techreport{101-skills-101-skills-agent-tools-2026,
  author = {101-skills},
  title = {agent-tools security audit report (audit version 5)},
  institution = {Skillstore},
  year = {2026},
  number = {5},
  url = {https://skillstore.io/skills/101-skills-agent-tools/audits/5},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "agent-tools security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
  - name: "101-skills"
date-released: "2026-07-12"
url: "https://skillstore.io/skills/101-skills-agent-tools/audits/5"
identifiers:
  - type: other
    value: "skillstore:101-skills-agent-tools:audit:5"
    description: "Skillstore immutable audit report identifier"

Compare variants

20 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Higher Skillstore usage

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

tul-sh Recommended

tul-sh-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 27

Updated

2026-08-21

toolshell

toolshell-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 24

Updated

2026-08-21

inferen-sh

inferen-sh-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 15

Updated

2026-08-21

tool-belt

tool-belt-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 13

Updated

2026-08-21

inferencesh

inferencesh-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 12

Updated

2026-08-21

inference-sh-skills

inference-sh-skills-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 11

Updated

2026-08-21

inference-sh-7

inference-sh-7-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 11

Updated

2026-08-21

inf-sh

inf-sh-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 10

Updated

2026-08-21

inference-skills

inference-skills-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 10

Updated

2026-08-21

inference-sh-9

inference-sh-9-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 9

Updated

2026-08-21

inference-sh-3

inference-sh-3-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 9

Updated

2026-08-21

skillssh

skillssh-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 8

Updated

2026-08-21

qu-skills

qu-skills-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 8

Updated

2026-08-21

infsh-skills

infsh-skills-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 8

Updated

2026-08-21

inference-sh-0

inference-sh-0-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 8

Updated

2026-08-21

inference-sh-6

inference-sh-6-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 7

Updated

2026-08-21

inference-shell

inference-shell-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 6

Updated

2026-08-21

101-skills Current

101-skills-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 6

Updated

2026-08-21

inference-sh-8

inference-sh-8-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 5

Updated

2026-08-21

halt-catch-fire

halt-catch-fire-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 5

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Create Campaign Media

Generate images and videos, then monitor long-running tasks from one command workflow.

Compare AI Applications

Search the public catalog, inspect input requirements, and test suitable models.

Automate Research Collection

Run search and language applications, then save task results for later review.

Try These Prompts

Find an App

Search the inference.sh store for applications that handle [task]. Compare the most relevant options and explain their required inputs.

Run a Generation Task

Inspect [app name], prepare inputs for [desired result], show me the final request, and run it after I approve.

Use Local Media

Prepare [app name] with [local file path]. State which file will be uploaded and the destination, then wait for my confirmation.

Build a Tracked Workflow

Design a version-pinned workflow using [apps]. Validate each schema, obtain approval for external actions, submit long tasks asynchronously, and summarize their results.

Best Practices

Inspect each app schema and pin its version before execution.
Confirm every local file upload, paid request, and external account action.
Keep API keys in protected environment variables and exclude them from logs and prompts.