ai-music-generation
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the vendor's command-line interface (CLI) from their official domain (cli.inference.sh) and retrieves binary updates from dist.inference.sh. These are standard operations for this vendor's ecosystem.
- [REMOTE_CODE_EXECUTION]: The skill provides an installation command that pipes a shell script from a remote URL (https://cli.inference.sh) directly into the shell (
| sh). While this pattern is often flagged, in this context, it is the official installation method for the inference.sh CLI provided by the vendor. - [COMMAND_EXECUTION]: The skill executes the
infshcommand-line tool to run music generation models (e.g.,infsh app run infsh/diffrythm). These commands are scoped to theinfshtool as defined in theallowed-toolsfrontmatter and are consistent with the skill's stated purpose of generating AI music.
Audit Metadata