flux-image

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These URLs are hosted on a single third‑party domain (inference.sh) that instructs users to run a remote installer via "curl ... | sh" and download binaries from dist.inference.sh — an installation pattern that is inherently risky because executing remote shell scripts and running non‑vendor binaries from an unverified domain can be used to distribute malware, even though the docs and image links themselves appear benign and checksums are provided.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md explicitly shows an "Image-to-Image" workflow that accepts arbitrary image URLs (e.g., "image_url": "https://your-image.jpg") which the agent/CLI will fetch and ingest from public web sources, meaning untrusted third-party content can be read and directly influence model outputs/actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The Quick Start instructs users to run "curl -fsSL https://cli.inference.sh | sh", which downloads and executes remote installer code from https://cli.inference.sh (and pulls binaries from dist.inference.sh) as a required dependency for the infsh CLI used at runtime.