customer-persona
Fail
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTION
Full Analysis
- [Remote Code Execution] (CRITICAL): The command
curl -fsSL https://cli.inference.sh | shwas detected. - Evidence: Found in automated security scan logs provided for the skill.
- Risk: This pattern (piping curl to sh) allows the remote server to execute arbitrary commands on the local system with the current user's privileges. The source domain 'cli.inference.sh' is not within the defined list of trusted organizations, making this a critical security threat.
- Context: Executing unverified code from the internet bypasses all local security controls and can lead to full system compromise.
Recommendations
- CRITICAL: Downloads and executes remote code from untrusted source(s): https://cli.inference.sh - DO NOT USE
- AI detected serious security threats
Audit Metadata