customer-persona
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The documentation suggests installing the
infshCLI by piping a script fromhttps://cli.inference.shdirectly to a shell (| sh). This is the vendor's official installation method and matches the domain associated with the skill author. - [COMMAND_EXECUTION]: The skill uses the
infshCLI to run external research and AI image generation applications (e.g.,tavily/search-assistant,falai/flux-dev-lora). This execution is governed by theallowed-toolsconfiguration which restricts the agent to theinfshcommand. - [EXTERNAL_DOWNLOADS]: The installation script downloads binary executables from
dist.inference.shafter performing OS and architecture detection. The skill also references external dependencies from theinference-shpackage scope vianpx. - [SAFE]: Data Ingestion Surface (Category 8). The skill ingests data from external search providers to populate persona templates. While this represents a surface for indirect prompt injection from external web content, the behavior is core to the research-driven purpose of the skill and does not escalate privilege or exfiltrate data.
Audit Metadata