Skills agent-tools
๐Ÿ“ฆ

agent-tools

Content revision r1 Critical ๐ŸŒ Network access๐Ÿ”‘ Env variables๐Ÿ“ Filesystem accessโš™๏ธ External commands

Run AI Apps with inference.sh CLI

Agents often need one way to discover and run hosted AI tools. This skill guides Claude, Codex, and Claude Code through inference.sh CLI workflows for models, media, search, and task tracking.

Supports: Claude Codex Code(CC)
โš ๏ธ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "agent-tools" from https://skillstore.io/skills/inference-sh-3-agent-tools.md and its manifest at https://skillstore.io/api/skills/inference-sh-3-agent-tools/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "agent-tools". Find image models for product mockups.

Expected outcome:

  • The skill lists relevant image apps and highlights model strengths.
  • It recommends checking app details before spending credits.
  • It suggests generating a sample input before the first run.

Using "agent-tools". Run a long video generation task and keep status.

Expected outcome:

The skill submits the approved task, reports the task identifier, checks status, and points to the saved result when available.

Using "agent-tools". Prepare a safe X posting workflow.

Expected outcome:

The skill drafts the post, requests explicit approval, and runs the authorized CLI action only after approval.

Security Audit

Critical
v4 โ€ข 7/5/2026 Open versioned report

Confirmed risks include remote installer guidance that pipes network content into a shell. The manual install also uses dynamic shell substitution to select a binary URL. Most other static hits are Markdown formatting, placeholder API key documentation, or ordinary product links.

5
Files scanned
554
Lines analyzed
10
Review items
0
False positives ignored

Confirmed security concerns (6)

Critical
Pipe to shell pattern
curl -fsSL https://cli.inference.sh | sh
The command pipes content fetched over HTTPS directly into sh. If the endpoint or transport path is compromised, arbitrary installer code runs immediately.
Critical
Pipe to shell pattern
curl -fsSL https://cli.inference.sh | sh
The reinstall guidance repeats the same curl-to-shell pattern. This is a high-impact remote code execution installation pattern.
Critical
Pipe to shell pattern
curl -fsSL https://cli.inference.sh | sh
The CLI reference instructs users to execute a downloaded script with sh. This is a confirmed dangerous installer pattern.
Critical
Pipe to shell pattern
curl -fsSL https://cli.inference.sh | sh
The top-level skill installation section uses curl piped to sh. This can execute arbitrary remote code during installation.
Medium
External Account Action Risk
The skill documents X automation, including posting tweets and related social actions. These actions can publish or modify external account state and need explicit user approval.
The cited lines explicitly show an X post command and a Twitter/X automation category. The risk is side-effectful external account automation, not hidden malware.
Medium
Unverified Remote Installer Trust Claims
The skill text reassures users that the remote installer has no elevated permissions, background processes, or telemetry. Those claims are not independently verifiable from the skill files and may reduce caution around remote execution.
The line contains explicit safety claims about a remote installer. The local skill files do not include the installer source needed to verify those claims.
Capability review items (10)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High
Hidden file in home directory
> mv inferencesh-cli-* ~/.local/bin/inferencesh
The manual installer places a downloaded executable into ~/.local/bin, which can put it on the user PATH. This is expected install behavior but still a real persistence and execution risk.
Medium
Shell command substitution
> curl -LO $(curl -fsSL https://dist.inference.sh/cli/manifest.json | grep -o '"url":"[^"]*"' | grep
The manual installer uses shell command substitution to fetch and parse a remote manifest before downloading an artifact. This is a real command-composition risk if the manifest or parsing is compromised.
Medium
Hidden file access
> mv inferencesh-cli-* ~/.local/bin/inferencesh
The command modifies a hidden home-directory path to install an executable. That filesystem change is security-relevant even though it is documented as manual installation.
Low
Hardcoded URL
curl -fsSL https://cli.inference.sh | sh
The URL is part of an install command that downloads remote content for shell execution. The network dependency is expected for the product, but it is security-relevant in installer context.
Low
Hardcoded URL
curl -fsSL https://cli.inference.sh | sh
The reinstall command repeats the same remote installer URL and could fetch changed code at execution time. This is a low network risk distinct from the pipe-to-shell issue.
Low
Hardcoded URL
curl -fsSL https://cli.inference.sh | sh
The installation reference points to a remote installer endpoint. The URL is expected, but it creates a network trust dependency for installation.
Low
Hardcoded URL
curl -fsSL https://cli.inference.sh | sh
The URL appears inside the primary installation command that fetches and executes a remote script. This is a real installer trust dependency.
Low
Hardcoded URL
> **What does the installer do?** The [install script](https://cli.inference.sh) detects your OS and
The line links to the remote install script and describes remote binary download behavior. The product link is expected, but it reinforces a network-based installer flow.
Low
Hardcoded URL
> curl -LO https://dist.inference.sh/cli/checksums.txt
The manual installation path downloads checksums from a hosted distribution endpoint. This is expected behavior, but still a network dependency for installing executable tooling.
Low
Hardcoded URL
> curl -LO $(curl -fsSL https://dist.inference.sh/cli/manifest.json | grep -o '"url":"[^"]*"' | grep
The command downloads a manifest from a remote host and uses it to select an artifact. That installer flow is security-relevant because the remote manifest controls the artifact URL.

Detected Patterns

Pipe to shell patternร—4
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/inference-sh-3-agent-tools/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/inference-sh-3-agent-tools/security.svg)](https://skillstore.io/skills/inference-sh-3-agent-tools?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/inference-sh-3-agent-tools?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/inference-sh-3-agent-tools/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/inference-sh-3-agent-tools.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

inference-sh-3. (2026). agent-tools security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/inference-sh-3-agent-tools/audits/4

BibTeX citation

@techreport{inference-sh-3-inference-sh-3-agent-tools-2026, author = {inference-sh-3}, title = {agent-tools security audit report (audit version 4)}, institution = {Skillstore}, year = {2026}, number = {4}, url = {https://skillstore.io/skills/inference-sh-3-agent-tools/audits/4}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "agent-tools security audit report (audit version 4)" version: "unspecified" type: report authors: - name: "inference-sh-3" date-released: "2026-07-05" url: "https://skillstore.io/skills/inference-sh-3-agent-tools/audits/4" identifiers: - type: other value: "skillstore:inference-sh-3-agent-tools:audit:4" description: "Skillstore immutable audit report identifier"

Compare variants

20 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Higher Skillstore usage
tul-sh Recommended

tul-sh-agent-tools

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 26
Updated

2026-08-21

toolshell-agent-tools

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 23
Updated

2026-08-21

inferen-sh-agent-tools

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 14
Updated

2026-08-21

tool-belt-agent-tools

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 12
Updated

2026-08-21

inferencesh-agent-tools

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 11
Updated

2026-08-21

inference-sh-skills-agent-tools

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 10
Updated

2026-08-21

inference-sh-7-agent-tools

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 10
Updated

2026-08-21

inf-sh-agent-tools

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 9
Updated

2026-08-21

inference-skills-agent-tools

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 9
Updated

2026-08-21

skillssh-agent-tools

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 8
Updated

2026-08-21

inference-sh-9-agent-tools

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 8
Updated

2026-08-21

inference-sh-3-agent-tools

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 8
Updated

2026-08-21

qu-skills-agent-tools

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 7
Updated

2026-08-21

infsh-skills-agent-tools

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 7
Updated

2026-08-21

inference-sh-6-agent-tools

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 7
Updated

2026-08-21

inference-sh-0-agent-tools

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 7
Updated

2026-08-21

inference-shell-agent-tools

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 6
Updated

2026-08-21

inference-sh-8-agent-tools

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 5
Updated

2026-08-21

101-skills-agent-tools

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 5
Updated

2026-08-21

halt-catch-fire-agent-tools

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 4
Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: Medium
45
Architecture
85
Maintainability
87
Content
71
Community
91
Spec Compliance

What You Can Build

Prototype media assets

Generate images, videos, speech, or 3D outputs from hosted models without managing local GPU infrastructure.

Compare hosted models

Search available apps, inspect model details, and run approved prompts across supported LLM and media providers.

Automate model tasks

Submit long-running jobs, track task status, and save results for repeatable team workflows.

Try These Prompts

List image apps
Use agent-tools to list inference.sh apps for image generation and summarize the best candidates for product mockups.
Prepare sample input
Use agent-tools to get sample input for falai/flux-dev-lora, save it, and explain each required field before running it.
Run and track video
Use agent-tools to run google/veo-3-1-fast with my approved prompt, then track the task until a result is available.
Build a model workflow
Use agent-tools to design a workflow that searches with Tavily, summarizes with Claude, and creates an image. Ask before any external action.

Best Practices

  • Confirm the target app, input file, and spending impact before running long jobs.
  • Use sample input commands before submitting a new model task.
  • Keep API keys in environment variables or secret stores outside chat transcripts.

Avoid

  • Piping remote installers directly to a shell during unattended agent sessions.
  • Running X posting, follow, like, retweet, or message actions without explicit approval.
  • Using broad app names without checking the exact namespace and version.

Frequently Asked Questions

What does this skill do?
It helps agents use the infsh CLI to discover, run, and track hosted inference.sh apps.
Does it install inference.sh automatically?
No. It documents installation commands, but users should approve and verify any install step.
What accounts or tools are required?
You need the infsh CLI, an inference.sh account, and credentials with access to the selected apps.
Can it run Claude or OpenRouter models?
Yes. The skill includes examples for OpenRouter and Claude models exposed through inference.sh apps.
Does it manage secrets?
No. It documents the INFSH_API_KEY environment variable and expects users to manage credentials securely.
Is social media automation safe?
It can affect external accounts. Always require explicit approval before posting, following, liking, retweeting, or messaging.

Developer Details

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Ref

a25199bc7d6b82598536822d1738eb5d5f54025b

Maintenance freshness

7/18/2026

Usage

5 downloads ยท 244 views

File structure

๐Ÿ“ references/

๐Ÿ“„ app-discovery.md

๐Ÿ“„ authentication.md

๐Ÿ“„ cli-reference.md

๐Ÿ“„ running-apps.md

๐Ÿ“„ SKILL.md

View all