ai-voice-cloning

This skill is a hosted TTS/voice-cloning integration that requires installing and running the inference.sh CLI and submitting text and media to the inference.sh platform. The stated purpose and capabilities are consistent with the actions requested (install CLI, login, run infsh app). The primary security concerns are supply-chain and privacy: the Quick Start recommends a curl | sh installer (download-and-execute), binaries are fetched from dist.inference.sh, and user content plus authentication tokens are sent to a third-party service. There are no signs of hidden backdoors, obfuscated malicious code, or requests for unrelated sensitive files. Treat this skill as a medium-risk supply-chain integration: acceptable if you trust inference.sh and verify installers/checksums manually; avoid piping installers directly to shell and review credential/storage practices before use.