ai-content-pipeline
Fail
Audited by Gen Agent Trust Hub on Feb 18, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION] (CRITICAL): The skill contains the command
curl -fsSL https://cli.inference.sh | sh. Executing unverified remote scripts via pipe to shell is a critical security risk as it allows for arbitrary code execution on the host system without prior verification or validation. - [EXTERNAL_DOWNLOADS] (HIGH): The skill downloads and executes code from
https://cli.inference.sh. This domain and its associated organization are not on the list of Trusted External Sources, increasing the risk of supply chain attacks or malicious payload delivery. - [COMMAND_EXECUTION] (MEDIUM): The skill is designed to interact with the system via the
Bashtool and a specialized CLI (infsh). While this is the intended purpose of the skill, the combination with unverified installation methods poses a significant threat.
Recommendations
- HIGH: Downloads and executes remote code from: https://cli.inference.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata