ai-content-pipeline
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill includes a command to download and execute an installation script:
curl -fsSL https://cli.inference.sh | sh. This is a standard installation pattern for the vendor's own CLI tool (inference-sh) and targets the vendor's primary domain, which is considered safe according to the author context rules. - [COMMAND_EXECUTION]: The skill uses the
Bash(infsh *)tool to execute various commands using theinfshCLI. These commands are used to run AI models for content generation (e.g.,infsh app run falai/flux-dev). All executed commands are within the expected scope of the skill's purpose for media pipeline automation. - [EXTERNAL_DOWNLOADS]: The installation script downloads binaries from
dist.inference.sh. As this is part of the vendor's infrastructure for providing their CLI tool, it is documented neutrally as a functional requirement.
Audit Metadata