The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The installation instructions involve executing curl -fsSL https://cli.inference.sh | sh, which downloads a script from a remote server and executes it directly. This pattern is susceptible to supply chain attacks or server compromises as the script is not inspected before execution.\n- [DATA_EXFILTRATION]: The CLI tool documentation describes a 'Local File Uploads' feature that automatically uploads local files whenever a file path is provided instead of a URL in input arguments. This provides an attack surface for data exfiltration where an agent could be directed to upload sensitive files such as ~/.ssh/id_rsa, .env, or AWS credentials by simply passing the path to the tool.\n- [PRIVILEGE_ESCALATION]: The CLI reference recommends installing shell completions by writing to /etc/bash_completion.d/, an operation requiring administrative (sudo/root) access to modify system-level configurations.\n- [EXTERNAL_DOWNLOADS]: The CLI installation process and manual download options fetch pre-compiled binaries and manifests from dist.inference.sh.\n- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to run commands via the belt CLI, which executes on the host system with the permissions of the agent process.

infsh-cli