infsh-cli
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the 'belt' CLI binary directly from its vendor's infrastructure at
cli.inference.shanddist.inference.sh. These downloads are transparently documented, and the installer includes checksum verification and optional cryptographic signing checks. - [REMOTE_CODE_EXECUTION]: The installation instructions use a standard 'curl | sh' pattern to install the CLI tool from the vendor's site. While this pattern typically requires caution, in this context it is the documented installation method for a known service provided by the skill author.
- [COMMAND_EXECUTION]: The skill executes various shell commands through the 'belt' CLI to manage AI tasks, such as generating images or videos. It also provides commands for managing local file uploads and shell completions, which are standard for developer tooling.
Audit Metadata