ai-avatar-video

Pass

Audited by Gen Agent Trust Hub on Mar 25, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides a command to download and execute an installation script from the vendor's official domain.
  • Evidence: curl -fsSL https://cli.inference.sh | sh in SKILL.md.
  • [COMMAND_EXECUTION]: Uses the specialized infsh command-line tool to perform operations such as authentication and model execution.
  • Evidence: infsh login, infsh app run bytedance/omnihuman-1-5.
  • [EXTERNAL_DOWNLOADS]: Fetches executable binaries and SHA-256 integrity checksums from the vendor's distribution server during the setup process.
  • Evidence: References to dist.inference.sh for binary downloads and verification.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 25, 2026, 01:02 AM