building-inferencesh-apps
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill contains a shell command
curl -fsSL https://cli.inference.sh | shintended to install the platform's command-line interface. While this pattern executes remote code, the source is the official domain of the vendor (inference.sh) associated with the skill, which is standard practice for CLI installations. - [EXTERNAL_DOWNLOADS]: Several reference files and instructions point to external installation scripts for developer tools, including Astral's 'uv' (
https://astral.sh/uv/install.sh), Vercel's 'fnm' (https://fnm.vercel.app/install), and Node Version Manager (https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.0/install.sh). These are well-known, industry-standard tools for Python and Node.js development environments. - [COMMAND_EXECUTION]: The documentation describes numerous CLI commands (
infsh app init,infsh app deploy,infsh app test) and shell patterns for testing and deploying applications. These commands are local to the developer's workflow and are consistent with the skill's primary purpose of application development on the platform.
Audit Metadata