infer-setup
Pass
Audited by Gen Agent Trust Hub on Apr 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill runs bash scripts to check for SDK updates using npm version queries and automates the installation of the official @inferevents/sdk package.\n- [CREDENTIALS_UNSAFE]: It manages secret read/write API keys and session tokens, storing them in the ~/.infer/config.json directory to facilitate authentication between the local environment and the Infer API.\n- [EXTERNAL_DOWNLOADS]: Communicates with api.infer.events to fetch project credentials and uses the npm registry to download official vendor packages and updates.\n- [DATA_EXPOSURE]: Analyzes the project's package.json and file structure to identify the framework in use and suggest appropriate integration points for analytics tracking.
Audit Metadata