flux-image
Fail
Audited by Gen Agent Trust Hub on Feb 18, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION] (CRITICAL): The skill contains the command
curl -fsSL https://cli.inference.sh | sh. This is a 'piped-to-shell' pattern which executes unverified remote code. Becauseinference.shis not on the list of Trusted External Sources, this is classified as a critical security risk. - [COMMAND_EXECUTION] (HIGH): The skill's frontmatter grants broad access to the system via
Bash(infsh *), which allows the agent to execute any subcommand of the potentially malicious CLI installed via the RCE pattern above. - [EXTERNAL_DOWNLOADS] (MEDIUM): The documentation suggests using
npx skills add inference-sh/skills@..., which downloads and executes code from npm packages. Without verification of the package author or source, this poses a supply chain risk.
Recommendations
- HIGH: Downloads and executes remote code from: https://cli.inference.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata