talking-head-production
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides an installation command that fetches and executes a script from the author's domain.
- Evidence:
curl -fsSL https://cli.inference.sh | shinSKILL.md. - Context: This is used to install the
infshCLI tool. The documentation notes that the script performs OS detection and verifies the binary's SHA-256 checksum. - [COMMAND_EXECUTION]: The skill utilizes the
infshCLI tool for video production and audio generation. - Evidence:
infsh app runcommands throughoutSKILL.md. - Context: Tool usage is scoped to the
infshcommand via the skill'sallowed-toolsfrontmatter.
Audit Metadata