youtube-thumbnail-design

Fail

Audited by Snyk on Mar 7, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.70). inference.sh is an unverified small-domain reference used to install and run a CLI (infsh) and related npm packages/remote app runs (via npx/infsh), which can execute arbitrary code — so it’s potentially risky unless you verify the package and domain reputation and inspect the code before running.
Audit Metadata
Risk Level
CRITICAL
Analyzed
Mar 7, 2026, 12:05 PM