storyboard-creation

Fail

Audited by Gen Agent Trust Hub on Feb 19, 2026

Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Remote Code Execution (CRITICAL): The skill uses curl -fsSL https://cli.inference.sh | sh to download and immediately execute a script from a third-party domain.
  • Evidence: Automated scanner detected the command pattern curl | sh targeting https://cli.inference.sh.
  • Risk: This method (piping to shell) is highly dangerous as the contents of the script can change at any time and it bypasses local security checks.
  • Trust Status: The domain inference.sh is not a recognized trusted source, escalating the risk level.
Recommendations
  • HIGH: Downloads and executes remote code from: https://cli.inference.sh - DO NOT USE without thorough review
  • AI detected serious security threats
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 19, 2026, 08:14 PM