speech-to-text
Pass
Audited by Gen Agent Trust Hub on Apr 4, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides an installation command (
curl -fsSL https://cli.inference.sh | sh) which downloads and executes a shell script from the vendor's infrastructure to set up theinfshCLI tool. - [EXTERNAL_DOWNLOADS]: The skill fetches the
infshbinary from the vendor's distribution server (dist.inference.sh) during the setup process. It also facilitates interaction with remote AI models hosted on the inference.sh platform. - [COMMAND_EXECUTION]: The skill is configured to use the
Bashtool specifically to run theinfshCLI. It uses this tool to execute various subcommands for authentication (login), application management (app run,app sample), and platform navigation (app list). - [DATA_EXFILTRATION]: Audio and video URLs provided by the user are sent to the vendor's remote API (
inference.sh) for processing. This is the primary intended function of the transcription service and utilizes the vendor's own infrastructure. - [SAFE]: All identified external resources, including domains and CLI tools, originate from the skill's author (inf-sh) and represent standard functionality for the service provided.
Audit Metadata