Skills
skills/1nfsh/skills/text-to-speech/Gen Agent Trust Hub

text-to-speech

Fail

Audited by Gen Agent Trust Hub on Feb 18, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION] (HIGH): The installation instructions contain the pattern curl -fsSL https://cli.inference.sh | sh. Piping a remote script directly to a shell is a critical security risk because the downloaded content is not verified for integrity or safety before execution.
  • [EXTERNAL_DOWNLOADS] (HIGH): The skill downloads and executes software from inference.sh, which is not on the list of Trusted External Sources. This introduces significant supply chain risk.
  • [COMMAND_EXECUTION] (MEDIUM): The skill requests broad Bash permissions for any command starting with infsh. Since this CLI tool is installed via an untrusted remote script, all subsequent tool calls inherit the risk of the installation process.
Recommendations
  • HIGH: Downloads and executes remote code from: https://cli.inference.sh - DO NOT USE without thorough review
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Feb 18, 2026, 01:36 AM
Security Audit — agent-trust-hub — text-to-speech