email-design
Fail
Audited by Gen Agent Trust Hub on Feb 19, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Remote Code Execution (CRITICAL): The skill executes code downloaded directly from the internet by piping a curl response to the shell.
- Evidence: Automated scan detected
curl -fsSL https://cli.inference.sh | sh. - Impact: The remote server at cli.inference.sh has full control over the commands executed on the host system, which could lead to malware installation or data theft.
- External Downloads (HIGH): The skill attempts to fetch resources from a domain that is not on the trusted sources list.
- Evidence: Reference to
https://cli.inference.shwhich is not a verified repository from a known trusted organization.
Recommendations
- HIGH: Downloads and executes remote code from: https://cli.inference.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata