pitch-deck-visuals
Fail
Audited by Gen Agent Trust Hub on Feb 18, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [Remote Code Execution] (CRITICAL): The skill contains a pattern that downloads a script and immediately executes it using a shell pipe.
- Evidence: Automated scan detected
curl -fsSL https://cli.inference.sh | sh. - Risk: This is a high-risk pattern (piped remote execution) that grants full command execution capability to an external entity. The domain
inference.shis not included in the list of trusted sources. - [External Downloads] (HIGH): Execution depends on fetching content from an external, unverifiable server.
- Evidence: Network request to
https://cli.inference.sh. - Risk: If the remote server is compromised or the connection is intercepted, malicious code can be injected into the environment.
Recommendations
- HIGH: Downloads and executes remote code from: https://cli.inference.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata