agent-tools

Warn

Audited by Socket on Oct 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core inference.sh CLI usage, credential needs, and file uploads are broadly aligned with the stated purpose, and the installer appears to be official same-org infrastructure rather than an unverifiable third-party payload. The main concerns are transitive skill installation instructions, the pipe-to-shell installer, and the fact that credentials and local files are forwarded into an external CLI/service that can perform real-world actions like Twitter automation.

Confidence: 89%Severity: 58%
Audit Metadata
Analyzed At
Oct 13, 2026, 08:09 AM
Package URL
pkg:socket/skills-sh/inference-sh%2Fskills%2Fagent-tools%2F@f172e971f6a8e2491402ec55f71a60d8f7b7208092e0b66882a5ac77c75da3d4