skills/inference-sh/skills/infsh-cli/Socket

infsh-cli

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core inference.sh/Belt functionality, credential use, and file uploads are broadly consistent with a cloud AI CLI, so this is not confirmed malware. Risk is elevated by curl|sh installation, local-file upload behavior, autonomous Twitter/X actions, and especially the repeated transitive installation of other skills; overall this is a coherent but high-trust skill with medium security risk.

Confidence: 89%Severity: 63%

Audit Metadata

Analyzed At

Sep 17, 2026, 04:13 PM

Package URL

pkg:socket/skills-sh/inference-sh%2Fskills%2Finfsh-cli%2F@3f315e09357cc130759de88f597ea8c0914fc9166a679479367d8b1bedde9986