data-visualization
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill includes an installation command for the
infshCLI tool by piping a script fromhttps://cli.inference.shdirectly to the shell (curl | sh). This is a standard installation pattern for this vendor's ecosystem. - [COMMAND_EXECUTION]: The skill utilizes the
infshCLI tool to execute Python code snippets for chart generation and to convert HTML to images. The execution environment is scoped using theallowed-toolsconfiguration, limiting Bash execution to theinfshcommand.
Audit Metadata