twitter-automation
Fail
Audited by Gen Agent Trust Hub on Feb 18, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- Remote Code Execution (CRITICAL): The skill contains the command
curl -fsSL https://cli.inference.sh | sh. This is a piped-to-shell pattern that downloads and immediately executes a script from an untrusted external domain (inference.sh), which is a high-risk vector for system compromise. - External Downloads (HIGH): The skill relies on software hosted at
inference.sh, which is not included in the list of trusted GitHub organizations or repositories. Any compromise of this domain or its CDN could lead to malicious code being delivered to users. - Command Execution (MEDIUM): The skill defines
allowed-tools: Bash(infsh *), granting the agent broad permission to execute any subcommand under theinfshnamespace. If the downloaded binary contains vulnerabilities or undocumented features, this broad scope increases the attack surface.
Recommendations
- HIGH: Downloads and executes remote code from: https://cli.inference.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata