agent-tools

SUSPICIOUS. The core inference.sh CLI path appears legitimate and same-org, so this is not confirmed malware, but the skill mixes broad capabilities, file uploads, public Twitter/X actions, wildcard Bash use, and transitive skill installation. The unverified `belt-sh/cli` install instruction is the main inconsistency; overall risk is medium due to trust-chain and autonomy concerns rather than clear credential theft or covert exfiltration.