building-inferencesh-apps

Pass

Audited by Gen Agent Trust Hub on Mar 24, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute scripts for installing the platform CLI and development tools.
  • Fetches and executes the platform CLI script from https://cli.inference.sh (vendor resource).
  • Fetches the uv installation script from astral.sh (well-known developer tool).
  • Fetches the fnm and nvm environment manager installation scripts from official sources (fnm.vercel.app and raw.githubusercontent.com).
  • [EXTERNAL_DOWNLOADS]: The skill references several external resources and repositories for development purposes.
  • Documentation and scripts for downloading AI models from the Hugging Face Hub using the huggingface_hub library.
  • References to the vendor's public example repository on GitHub (github.com/inference-sh/grid).
  • [COMMAND_EXECUTION]: The skill instructs users to run various shell commands for project management, testing, and deployment.
  • Uses the infsh CLI for app initialization, authentication, local testing, and cloud deployment.
  • Utilizes package managers such as pip, uv, npm, and pnpm to manage application dependencies.
  • Recommends using powershell with -ExecutionPolicy ByPass specifically for installing the uv tool on Windows systems.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 24, 2026, 10:18 AM