building-inferencesh-apps
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the platform's CLI tool via a shell script hosted on the vendor's official domain at
https://cli.inference.sh. - [EXTERNAL_DOWNLOADS]: Instructions for setting up development environments include installation scripts for well-known tools from trusted sources, including
uvfrom astral.sh,fnmfrom vercel.app, andnvmfrom its official GitHub repository. - [COMMAND_EXECUTION]: The documentation guides users through the standard lifecycle of an application on the platform using the
infshCLI, including project initialization (infsh app init), local testing (infsh app test), and deployment (infsh app deploy). - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill describes best practices for managing sensitive configuration data and API keys using environment variables (
os.environandprocess.env), which is the recommended method for secure secret management in application development.
Audit Metadata