building-inferencesh-apps

Warn

Audited by Socket on Jun 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core purpose is coherent with the capabilities: it is a platform-specific app-development guide centered on the Belt CLI and inference.sh. Main risks are the transitive skill installation and the `curl|sh` installer, but available evidence indicates the installer is officially documented by the same vendor ecosystem rather than an arbitrary third-party payload. No clear malicious data exfiltration or credential harvesting is present.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 14, 2026, 07:06 PM
Package URL
pkg:socket/skills-sh/inference-sh-skills%2Fskills%2Fbuilding-inferencesh-apps%2F@6d3150e1d124107dd898324d858068f278b478c3
Security Audit — socket — building-inferencesh-apps