skills/tul-sh/skills/linkedin-content/Gen Agent Trust Hub

linkedin-content

Fail

Audited by Gen Agent Trust Hub on Mar 4, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The installation instructions recommend executing curl -fsSL https://cli.inference.sh | sh. This pattern is highly dangerous as it downloads and runs code from a remote server without integrity checks or prior verification, potentially allowing for complete system compromise.
  • [EXTERNAL_DOWNLOADS]: The skill relies on downloading binaries from dist.inference.sh and uses npx skills add to fetch additional components from inference-sh/skills. These actions introduce external, third-party code into the agent's environment at runtime.
  • [COMMAND_EXECUTION]: The skill requests permission for the Bash tool to execute infsh CLI commands. This includes logging into services and running remote applications, granting the skill significant control over shell-based operations and external data transmission.
Recommendations
  • HIGH: Downloads and executes remote code from: https://cli.inference.sh - DO NOT USE without thorough review
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Mar 4, 2026, 12:29 PM