agent-tools
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads CLI components from the vendor domains cli.inference.sh and dist.inference.sh.
- [REMOTE_CODE_EXECUTION]: The CLI installation command pipes a remote script to the shell (curl -fsSL https://cli.inference.sh | sh). This is a standard vendor-provided installation method targeting official infrastructure.
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute the infsh command for interacting with the platform.
- [DATA_EXFILTRATION]: The infsh CLI is documented to automatically upload local files to the cloud when a file path is provided in the input parameters for AI apps like image upscalers or video generators.
Audit Metadata