Skills
Navigate
skills/j-star-films-studios/vibecode-protocol-suite/twitter-automation/Gen Agent Trust Hub

twitter-automation

Fail

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill instructs the user or agent to install the inference.sh CLI by piping a remote script directly into the shell (curl -fsSL https://cli.inference.sh | sh). This pattern is inherently dangerous as it executes unverified code from a remote server with the user's system privileges.
  • [EXTERNAL_DOWNLOADS]: The skill depends on binary downloads from inference.sh and suggests the installation of additional skills via npx, which fetches code from external package registries.
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to run the infsh CLI. While the frontmatter attempts to restrict the agent to infsh subcommands, the setup instructions provide commands that would bypass these restrictions if executed in a standard shell environment.
Recommendations
  • HIGH: Downloads and executes remote code from: https://cli.inference.sh - DO NOT USE without thorough review
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Jun 18, 2026, 04:31 AM
Security Audit — agent-trust-hub — twitter-automation