Security audit
Security checks for vulnerabilities and agentic risk
The skill is aimed at Twitter/X thread creation, but its install and helper commands ask users to trust mutable remote code and broad CLI actions.
Install only if you trust inference.sh and are comfortable with its CLI posting to your X account. Prefer manual, version-pinned installation and checksum verification, avoid the curl-to-sh quick start, and treat the optional npx related-skill commands as separate installs requiring separate review.
SKILL.md:14Unreviewed Remote Installation Script Executed Directly by the Shell
SKILL.md:255Unpinned Third-Party Skill Installation Through npx
curl ... | sh executes a remote script directly from the network without prior local inspection, which is a classic supply-chain and remote code execution risk. Even with accompanying claims about checksum verification, users are still instructed to trust and execute whatever the remote endpoint serves at runtime, and those claims themselves should not reduce suspicion.
curl -fsSL https://cli.inference.sh | sh && infsh login
# Post a tweet
infsh app run x/post-create --input '{
The trigger list is very broad and includes generic social-media phrases, which raises the chance this skill will be invoked in situations not specifically requesting thread creation. Because the skill also documents external actions like posting and research, accidental invocation could lead to unintended network actions or content generation under the wrong context.
The declared purpose is Twitter/X thread creation, but the implementation also performs external research and webpage screenshot capture. This mismatch can cause operators or orchestration systems to grant the skill more trust or broader invocation than warranted, making unintended browsing or data collection more likely.
The skill includes browser and search capabilities that go beyond simple thread-writing guidance, expanding it into external content retrieval and webpage interaction. This increases attack surface by enabling access to untrusted remote content, which could lead to unsafe data handling, misleading outputs, or unintended interaction with sensitive URLs if invoked broadly.
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
No suspicious patterns detected.