storyboard-creation
Fail
Audited by Gen Agent Trust Hub on Feb 18, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTION
Full Analysis
- Remote Code Execution (CRITICAL): The automated scanner detected the pattern
curl -fsSL https://cli.inference.sh | sh. This represents a confirmed piped remote execution vulnerability. The command downloads a script from an external URL and executes it immediately via the shell without any verification or human review. Since the domain 'inference.sh' is not part of the provided list of trusted organizations or repositories, this behavior is classified as a critical risk because it allows the remote server to execute arbitrary commands with the full privileges of the agent.
Recommendations
- HIGH: Downloads and executes remote code from: https://cli.inference.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata