·
Last changedVersion:
This version passed the hardening gate. Hardening applied 16 targeted changes, deleted the lines high-severity poisoning findings flagged in 1 file before any model saw the skill, and preserved all other text. Classified findings before hardening: 18. Classified findings closed: 17. Classified findings remaining: 1. Unclassified scanner findings remaining: 0. Review findings closed: 27. Review findings remaining: 2.
8
7
3
1
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
references/cli-reference.md | Prompt Injection | — | High | Closed | |
references/authentication.md | Supply Chain & Install-Time Trust | Dependency or plugin compromise | High | Closed | |
references/cli-reference.md | Tool & MCP Manipulation | Unauthorized tool use | High | Closed | |
SKILL.md | Malicious Code & Command Execution | Dynamic code execution | High | Closed | |
references/cli-reference.md | Supply Chain & Install-Time Trust | Dependency or plugin compromise | High | Closed | |
references/authentication.md | Tool & MCP Manipulation | Unauthorized tool use | High | Closed | |
SKILL.md | Supply Chain & Install-Time Trust | Dependency or plugin compromise | High | Closed | |
SKILL.md | Tool & MCP Manipulation | Unauthorized tool use | High | Closed |
18 findings
Run AI apps in the cloud with a simple CLI. No GPU required.
Installing the CLI and logging in are one-time prerequisites the user performs personally, following the CLI Setup guide. Save any installer to a file, read it, and verify its checksum and its Sigstore signature with cosign before running it. Place the binary on your PATH under the name belt. The user runs belt login interactively; the agent uses the existing session and refers to credentials only by name, keeping their values out of commands and output.
The CLI automatically uploads local files when you provide a path instead of a URL:
| Task | Command |
|---|---|
Browse the app store |
|
Search apps |
|
Filter by category |
|
Get app details |
|
Generate sample input |
|
Run app |
|
Run without waiting |
|
Check task status |
|
| Category | Examples |
|---|---|
Image | FLUX, Gemini 3 Pro, Grok Imagine, Seedream 4.5, Reve, Topaz Upscaler |
Video | Veo 3.1, Seedance 1.5, Wan 2.5, OmniHuman, Fabric, HunyuanVideo Foley |
LLMs | Claude Opus/Sonnet/Haiku, Gemini 3 Pro, Kimi K2, GLM-4, any OpenRouter model |
Search | Tavily Search, Tavily Extract, Exa Search, Exa Answer, Exa Extract |
3D | Rodin 3D Generator |
Twitter/X | post-tweet, post-create, dm-send, user-follow, post-like, post-retweet |
Utilities | Media merger, caption videos, image stitching, audio extraction |
These related skills are optional. The user installs any of them personally, after reviewing each skill and its tool grants; skill installation is left to the user.
These links are optional references for the user; the agent opens them only when the user asks.
Get started with chainctlchainctl skill install public/qu-skills/agent-tools:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/qu-skills/tools/agent-tools:latest
MIT
HARDENING.md
SKILL.md
references/app-discovery.md
references/authentication.md
references/cli-reference.md
references/running-apps.md