building-inferencesh-apps
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the belt CLI and other development prerequisites.
- Fetches the platform CLI from https://cli.inference.sh.
- Downloads the uv package manager from https://astral.sh.
- Downloads Node.js version managers from https://fnm.vercel.app and https://raw.githubusercontent.com/nvm-sh/nvm/.
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to pipe remote scripts to a shell for installation.
- Instructions for installing the vendor's CLI: curl -fsSL https://cli.inference.sh | sh.
- Instructions for installing uv: curl -LsSf https://astral.sh/uv/install.sh | sh.
- Instructions for installing fnm: curl -fsSL https://fnm.vercel.app/install | bash.
- [PRIVILEGE_ESCALATION]: The skill includes instructions to bypass execution policies on Windows.
- Command: powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex" is used to install the uv tool.
Audit Metadata