twitter-thread-creation

Pass

Audited by Gen Agent Trust Hub on Mar 8, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill includes an installation command curl -fsSL https://cli.inference.sh | sh that pipes a remote script to the shell. This is a standard installation pattern for the vendor's CLI tool and originates from the author's primary domain (inference.sh).
  • [EXTERNAL_DOWNLOADS]: The skill references binary downloads from dist.inference.sh and uses npx to install additional skill packages from the inference-sh GitHub repository. It also utilizes well-known services like Tavily for search assistance.
  • [COMMAND_EXECUTION]: The skill utilizes the infsh command-line tool to perform tasks like posting content and generating images. The skill's metadata restricts command execution to the infsh toolset using the allowed-tools field, which limits the potential attack surface.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 8, 2026, 02:51 AM