social-media-carousel

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). Suspicious — the site is an unverified .sh domain and the skill explicitly pipes a remote install script (https://cli.inference.sh) into sh, which allows arbitrary code execution from an unknown source and is a common malware distribution pattern with no clear trust signals or official package-manager provenance.