app-store-screenshots
Warn
Audited by Socket on Sep 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core purpose is coherent, but the skill is not self-contained and asks the agent to install another skill and optionally more related skills, creating transitive trust. The CLI and installer appear to be official inference.sh ecosystem components rather than an obvious malicious third party, so this is not confirmed malware; risk is mainly supply-chain exposure and credential/file forwarding through the external CLI.
Confidence: 86%Severity: 56%
Audit Metadata