agent-tools

Pass

Audited by Gen Agent Trust Hub on Aug 28, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill instructs the user to install the CLI by piping a remote script to the shell: curl -fsSL https://cli.inference.sh | sh. This is a common installation pattern for CLI tools. The source cli.inference.sh is an official domain for the tool being documented.
  • [EXTERNAL_DOWNLOADS]: The skill downloads binaries and manifest files from dist.inference.sh during the manual installation process. These are official distribution points for the inference.sh CLI.
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute CLI commands for generating images, videos, and interacting with AI models. All commands are standard usage of the documented tool (e.g., belt app run, belt login).
  • [DATA_EXFILTRATION]: The CLI automatically uploads local files when a file path is provided in the input JSON. This is a documented feature for providing local media to cloud-based AI models for processing (e.g., upscaling an image or generating video from a photo).
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 28, 2026, 01:13 PM
Security Audit — agent-trust-hub — agent-tools