image-to-video
Fail
Audited by Snyk on Feb 16, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.90). Suspicious: the domain is not a recognized vendor and the skill explicitly instructs piping a remote .sh installer (https://cli.inference.sh) into sh — a high‑risk remote code execution pattern commonly used to distribute malware unless you verify and inspect the script first.
Audit Metadata