youtube-thumbnail-design
Fail
Audited by Snyk on Mar 7, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.70). inference.sh is an unverified small-domain reference used to install and run a CLI (infsh) and related npm packages/remote app runs (via npx/infsh), which can execute arbitrary code — so it’s potentially risky unless you verify the package and domain reputation and inspect the code before running.
Audit Metadata