background-removal
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
infshCLI tool to interact with the inference.sh platform. It requires theBash(infsh *)tool to execute commands such asinfsh loginandinfsh app run. These commands are standard for the tool's intended functionality of running AI models for image processing. - [EXTERNAL_DOWNLOADS]: The documentation mentions using
npx skills addto install additional skills from theinference-sh/skillsrepository. These are vendor-provided resources associated with the skill author. - [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it processes untrusted data through
image_urlandpromptparameters in CLI commands. - Ingestion points:
image_urlandpromptfields within theinfsh app runcommands inSKILL.md. - Boundary markers: None identified in the provided command templates.
- Capability inventory:
Bash(infsh *)tool permission defined inSKILL.mdallows execution of platform-specific CLI commands. - Sanitization: No explicit sanitization or validation of the input URLs or prompts is described within the skill's instructions.
Audit Metadata