linkedin-content
Fail
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The installation instructions recommend executing
curl -fsSL https://cli.inference.sh | sh. This pattern is highly dangerous as it downloads and runs code from a remote server without integrity checks or prior verification, potentially allowing for complete system compromise. - [EXTERNAL_DOWNLOADS]: The skill relies on downloading binaries from
dist.inference.shand usesnpx skills addto fetch additional components frominference-sh/skills. These actions introduce external, third-party code into the agent's environment at runtime. - [COMMAND_EXECUTION]: The skill requests permission for the
Bashtool to executeinfshCLI commands. This includes logging into services and running remote applications, granting the skill significant control over shell-based operations and external data transmission.
Recommendations
- HIGH: Downloads and executes remote code from: https://cli.inference.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata