infsh-cli

SUSPICIOUS: the core inference.sh/Belt functionality, credential use, and file uploads are broadly consistent with a cloud AI CLI, so this is not confirmed malware. Risk is elevated by curl|sh installation, local-file upload behavior, autonomous Twitter/X actions, and especially the repeated transitive installation of other skills; overall this is a coherent but high-trust skill with medium security risk.