pitch-deck-visuals
Fail
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Unverifiable Dependencies & Remote Code Execution (CRITICAL): The skill contains a command to download and immediately execute a script from an external, untrusted source. * Evidence:
curl -fsSL https://cli.inference.sh | sh. * Risk: Piped remote execution (curl | sh) bypasses local integrity checks and allows the remote server to execute arbitrary commands. The domaincli.inference.shis not on the list of trusted repositories or organizations, making this a high-risk operation.
Recommendations
- CRITICAL: Downloads and executes remote code from untrusted source(s): https://cli.inference.sh - DO NOT USE
- AI detected serious security threats
Audit Metadata