video-prompting-guide
Fail
Audited by Snyk on Mar 25, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.70). These URLs are coherent and appear to be part of the same service (inference.sh) and include docs and checksum files, but the recommended "curl https://cli.inference.sh | sh" install pattern and direct distribution of binaries from an unfamiliar domain make this a potentially risky download source unless you manually inspect the install script and verify checksums/signatures.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The Quick Start runs a remote installer with curl -fsSL https://cli.inference.sh | sh which downloads and executes code at runtime and is presented as a required dependency for using the infsh commands in this skill.
Issues (2)
E005
CRITICALSuspicious download URL detected in skill instructions.
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata