seo-content-brief

Fail

Audited by Gen Agent Trust Hub on Mar 4, 2026

Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches an installation script from the vendor's domain at https://cli.inference.sh.
  • [REMOTE_CODE_EXECUTION]: Executes the vendor's remote script via a shell pipe (curl | sh) for CLI setup.
  • [COMMAND_EXECUTION]: Uses the Bash tool to execute infsh CLI commands for keyword research and data extraction.
  • [PROMPT_INJECTION]: Exposed to indirect prompt injection through external data processing. 1. Ingestion points: Search queries and URLs in SKILL.md. 2. Boundary markers: None. 3. Capability inventory: Commands executed via infsh app run. 4. Sanitization: No validation of external content.
Recommendations
  • HIGH: Downloads and executes remote code from: https://cli.inference.sh - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Mar 4, 2026, 12:29 PM