Skills agent-tools

📦

agent-tools

Name: agent-tools
Author: inferencesh

Content revision r1 Critical 🌐 Network access🔑 Env variables📁 Filesystem access⚙️ External commands

Run inference.sh AI Apps

Agents need one interface for many hosted AI models and media workflows. This skill teaches Claude, Codex, and Claude Code to use the infsh CLI safely.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Do not auto-install this skill.

The canonical policy requires operator review before any installation action.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "agent-tools" from https://skillstore.io/skills/inferencesh-agent-tools.md and its manifest at https://skillstore.io/api/skills/inferencesh-agent-tools/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/inferencesh-agent-tools.md Signed manifest GET /api/skills/inferencesh-agent-tools/manifest Signed lockfile GET /api/skills/inferencesh-agent-tools/lockfile

Test it

Using "agent-tools". Find a fast video model for a short product clip.

Expected outcome:

The assistant lists relevant video apps, explains speed and quality tradeoffs, and recommends generating sample input first.

Using "agent-tools". Run an image generation task and save the result.

Expected outcome:

The assistant selects an image app, prepares input, runs the task, reports completion, and points to the saved media result.

Using "agent-tools". Troubleshoot an invalid input error.

Expected outcome:

The assistant checks the app schema.
It identifies missing fields.
It suggests corrected input values.

Security Audit

Critical

v4 • 7/5/2026 Open versioned report

Review confirmed multiple remote installer commands that pipe downloaded content directly into a shell, which is a critical supply-chain risk. Most API key, hidden file, documentation link, and system reconnaissance matches are benign reference material. The skill still carries elevated risk because it grants broad infsh command access and includes account-changing cloud and X/Twitter actions.

Files scanned

545

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (7)

Critical

references/authentication.md:6

Pipe to shell pattern

curl -fsSL https://cli.inference.sh | sh

The command pipes a remote installer directly into sh without checksum or signature verification. If the endpoint or transport is compromised, it can execute arbitrary code.

Critical

references/authentication.md:44

Pipe to shell pattern

curl -fsSL https://cli.inference.sh | sh

The reinstall path repeats the same remote script piped into sh. This is a critical supply-chain pattern even when used for a legitimate CLI installer.

Critical

references/cli-reference.md:6

Pipe to shell pattern

curl -fsSL https://cli.inference.sh | sh

The installation command downloads a remote script and executes it with sh. This bypasses normal package verification and creates direct code execution risk.

Critical

SKILL.md:21

Pipe to shell pattern

curl -fsSL https://cli.inference.sh | sh

The skill prominently instructs running a remote installer directly through sh. That gives the remote endpoint immediate local code execution without integrity verification.

High

SKILL.md:9

Broad Account-Scoped CLI Permission

The skill declares allowed-tools for any infsh command, allowing the agent to run broad account-scoped CLI actions once active.

The permission line is explicit, and the CLI reference lists authenticated app execution and development commands. Impact depends on configured account credentials.

High

SKILL.md:40-41 SKILL.md:69

State-Changing Social Media Automation

The skill provides X/Twitter commands for posting and lists actions for direct messages, following, likes, and reposts. These workflows can act from a user account.

The listed commands and action categories directly support social publishing and engagement. The risk depends on whether the user has connected credentials.

Medium

SKILL.md:74-100

Related Skill Supply Chain Expansion

The related skills section recommends installing multiple additional skills through npx. That expands the trusted instruction set beyond this audited package.

The commands are explicit installation recommendations. The exact risk depends on the content and review status of each related skill.

Capability review items (16)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

SKILL.md:20-23

Ruby/shell backtick execution

```bash

The surrounding fenced bash block tells the agent or user to run installer and login commands. These external commands change local and account state.

Medium

SKILL.md:27-45

Ruby/shell backtick execution

```bash

The fenced example block contains infsh app run commands for cloud models, web search, and X/Twitter posting. These commands can trigger network calls and account actions.

Medium

SKILL.md:51-52

Ruby/shell backtick execution

| List all apps | `infsh app list` |

The inline command lists remote apps through the infsh CLI. It is a legitimate feature, but it still invokes an external authenticated tool.

Medium

SKILL.md:52-53

Ruby/shell backtick execution

| Search apps | `infsh app list --search "flux"` |

The inline command searches remote app metadata through infsh. This expected external command can disclose query intent to the service.

Medium

SKILL.md:53-54

Ruby/shell backtick execution

| Filter by category | `infsh app list --category image` |

The inline command filters hosted apps through the external CLI. It is benign in intent but confirms networked command execution.

Medium

SKILL.md:54-55

Ruby/shell backtick execution

| Get app details | `infsh app get google/veo-3-1-fast` |

The inline command retrieves app details from the inference.sh service. That is legitimate discovery, but it uses an external account-scoped CLI.

Medium

SKILL.md:55-56

Ruby/shell backtick execution

| Generate sample input | `infsh app sample google/veo-3-1-fast --save input.json` |

The inline command generates and saves sample input through infsh. It can write files and depends on trusted CLI behavior.

Medium

SKILL.md:56-57

Ruby/shell backtick execution

| Run app | `infsh app run google/veo-3-1-fast --input input.json` |

The inline command runs a hosted AI app with an input file. It can consume account credits and submit local prompt data to a remote service.

Medium

SKILL.md:57-58

Ruby/shell backtick execution

| Run without waiting | `infsh app run <app> --input input.json --no-wait` |

The no-wait run command can start long-running cloud tasks without immediate result review. It still submits data and may consume account resources.

Medium

SKILL.md:58-74

Ruby/shell backtick execution

| Check task status | `infsh task get <task-id>` |

The task lookup command queries remote task state through the infsh CLI. This is normal operation, but it confirms external service interaction.

Medium

SKILL.md:74-100

Ruby/shell backtick execution

```bash

The related-skills block recommends npx skills add commands, which can install additional remote skill content. That expands the trusted instruction surface beyond this package.

Low

references/authentication.md:6

Hardcoded URL

curl -fsSL https://cli.inference.sh | sh

This URL is part of a command that downloads a remote installer from inference.sh. The network access is expected, but it creates supply-chain exposure when paired with shell execution.

Low

references/authentication.md:44

Hardcoded URL

curl -fsSL https://cli.inference.sh | sh

This reinstall command downloads the CLI installer from a remote URL. The URL itself is documented, but it contributes to the remote installer trust boundary.

Low

references/cli-reference.md:6

Hardcoded URL

curl -fsSL https://cli.inference.sh | sh

The hardcoded URL is used to fetch a remote CLI installer. It is expected network access, but it should be verified before execution.

Low

SKILL.md:14

Hardcoded URL

![[inference.sh](https://inference.sh)](https://cloud.inference.sh/app/files/u/4mg21r6ta37mpaz6ktzwt

The Markdown embeds a remotely hosted image that may be requested when rendered. This is a low-severity privacy and dependency risk, not code execution.

Low

SKILL.md:21

Hardcoded URL

curl -fsSL https://cli.inference.sh | sh

The URL is the source for a remote installer command. The network access is intended, but it is risky when combined with direct shell execution.

Risk Factors

Detected Patterns

Pipe to shell pattern×4

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/inferencesh-agent-tools/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/inferencesh-agent-tools/security.svg)](https://skillstore.io/skills/inferencesh-agent-tools?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/inferencesh-agent-tools?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/inferencesh-agent-tools/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/inferencesh-agent-tools.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

inferencesh. (2026). agent-tools security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/inferencesh-agent-tools/audits/4

BibTeX citation

@techreport{inferencesh-inferencesh-agent-tools-2026,
  author = {inferencesh},
  title = {agent-tools security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/inferencesh-agent-tools/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "agent-tools security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "inferencesh"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/inferencesh-agent-tools/audits/4"
identifiers:
  - type: other
    value: "skillstore:inferencesh-agent-tools:audit:4"
    description: "Skillstore immutable audit report identifier"

Compare variants

20 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Higher Skillstore usage

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

tul-sh Recommended

tul-sh-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 26

Updated

2026-08-21

toolshell

toolshell-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 23

Updated

2026-08-21

inferen-sh

inferen-sh-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 14

Updated

2026-08-21

tool-belt

tool-belt-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 12

Updated

2026-08-21

inferencesh Current

inferencesh-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 11

Updated

2026-08-21

inference-sh-skills

inference-sh-skills-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 10

Updated

2026-08-21

inference-sh-7

inference-sh-7-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 10

Updated

2026-08-21

inf-sh

inf-sh-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 9

Updated

2026-08-21

inference-skills

inference-skills-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 9

Updated

2026-08-21

skillssh

skillssh-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 8

Updated

2026-08-21

inference-sh-9

inference-sh-9-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 8

Updated

2026-08-21

inference-sh-3

inference-sh-3-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 8

Updated

2026-08-21

qu-skills

qu-skills-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 7

Updated

2026-08-21

infsh-skills

infsh-skills-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 7

Updated

2026-08-21

inference-sh-6

inference-sh-6-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 7

Updated

2026-08-21

inference-sh-0

inference-sh-0-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 7

Updated

2026-08-21

inference-shell

inference-shell-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 6

Updated

2026-08-21

inference-sh-8

inference-sh-8-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 5

Updated

2026-08-21

101-skills

101-skills-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 5

Updated

2026-08-21

halt-catch-fire

halt-catch-fire-agent-tools

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 4

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Prototype Media Generation

Find image, video, audio, or 3D apps and run fast test jobs from the command line.

Compare Hosted AI Models

Discover LLM, search, and media apps, inspect schemas, and compare results across providers.

Operate Account Workflows

Use authenticated CLI commands for app runs, task tracking, deployment checks, and optional X/Twitter workflows.

Try These Prompts

List Available Apps

Find inference.sh apps for image generation. List strong options and explain what each one is best for before running anything.

Create Sample Input

Inspect the app google/veo-3-1-fast and create a sample input file. Explain which fields I should edit.

Run And Track A Task

Run an image generation task with my prompt, track it until completion, and summarize the returned media result.

Build A Multi-Step Workflow

Find a text-to-image app, prepare a prompt from my product brief, run the task, then collect supporting references with a search app. Ask before paid or publishing actions.

Best Practices

Review remote installation commands before execution.
Use sample input and app details before running paid tasks.
Confirm X/Twitter, deployment, or credential-related actions with the account owner.