storyboard-creation
Fail
Audited by Gen Agent Trust Hub on Feb 19, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Remote Code Execution (CRITICAL): The skill uses
curl -fsSL https://cli.inference.sh | shto download and immediately execute a script from a third-party domain. - Evidence: Automated scanner detected the command pattern
curl | shtargetinghttps://cli.inference.sh. - Risk: This method (piping to shell) is highly dangerous as the contents of the script can change at any time and it bypasses local security checks.
- Trust Status: The domain
inference.shis not a recognized trusted source, escalating the risk level.
Recommendations
- HIGH: Downloads and executes remote code from: https://cli.inference.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata