ai-marketing-videos
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill documents an installation command (
curl -fsSL https://cli.inference.sh | sh) that pipes a remote script into a shell. This is a common pattern for installing CLI tools but represents a potential remote code execution vector if the source were untrusted. - [EXTERNAL_DOWNLOADS]: The installation process involves downloading a binary executable from
dist.inference.sh. The documentation notes that this script performs OS/architecture detection and SHA-256 checksum verification. - [COMMAND_EXECUTION]: The skill uses the
infshcommand-line tool viaBashto interact with remote AI models (Google Veo, ByteDance Seedance, etc.) for video, audio, and text generation. It also uses standard shell loops and redirection to manage workflow files locally.
Audit Metadata