Skills
skills/1nfsh/skills/social-media-carousel/Gen Agent Trust Hub

social-media-carousel

Fail

Audited by Gen Agent Trust Hub on Feb 18, 2026

Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION] (CRITICAL): The skill instructs the agent to run curl -fsSL https://cli.inference.sh | sh. This pattern downloads and executes a shell script from an untrusted external source, which is a severe security risk.
  • [EXTERNAL_DOWNLOADS] (HIGH): The skill relies on downloading and installing a CLI tool from inference.sh, a domain that is not included in the list of trusted external sources.
  • [COMMAND_EXECUTION] (MEDIUM): The skill utilizes the Bash tool with infsh * permissions. This allows the agent to execute any command provided by the unverified infsh CLI, granting it significant control over the environment.
Recommendations
  • HIGH: Downloads and executes remote code from: https://cli.inference.sh - DO NOT USE without thorough review
  • AI detected serious security threats
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 18, 2026, 01:37 AM
Security Audit — agent-trust-hub — social-media-carousel