video-prompting-guide

Fail

Audited by Snyk on Mar 25, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.70). These URLs are coherent and appear to be part of the same service (inference.sh) and include docs and checksum files, but the recommended "curl https://cli.inference.sh | sh" install pattern and direct distribution of binaries from an unfamiliar domain make this a potentially risky download source unless you manually inspect the install script and verify checksums/signatures.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.90). The Quick Start runs a remote installer with curl -fsSL https://cli.inference.sh | sh which downloads and executes code at runtime and is presented as a required dependency for using the infsh commands in this skill.

Issues (2)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Mar 25, 2026, 01:02 AM
Issues
2