building-inferencesh-apps
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the 'infsh' CLI installation script from the vendor's official domain ('cli.inference.sh').
- [EXTERNAL_DOWNLOADS]: Downloads and installs development tools from trusted sources, including 'uv' (Astral), 'fnm' (Vercel), and 'nvm' (GitHub/nvm-sh).
- [REMOTE_CODE_EXECUTION]: Utilizes shell execution patterns (piping 'curl' output to 'sh' or 'bash') for the automated setup of the 'infsh' CLI and associated development environments.
- [COMMAND_EXECUTION]: Directs the agent to perform application lifecycle tasks using the 'infsh' CLI, such as initialization ('init'), local testing ('test'), and deployment ('deploy').
- [COMMAND_EXECUTION]: Instructs the use of standard package managers ('pip' via 'uv', 'npm' or 'pnpm') to resolve dependencies specified in application configuration files.
Audit Metadata