building-inferencesh-apps

Warn

Audited by Socket on Oct 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s content mostly matches its stated purpose and the inference.sh CLI installer appears official, but the top-level instruction to install a separate `belt-sh/cli` skill adds unnecessary transitive trust and unclear publisher linkage. No strong evidence of credential theft or malicious exfiltration, but the install path is broader than needed for a documentation skill.

Confidence: 88%Severity: 58%
Audit Metadata
Analyzed At
Oct 15, 2026, 12:29 PM
Package URL
pkg:socket/skills-sh/inference-sh%2Fskills%2Fbuilding-inferencesh-apps%2F@e434705d653f8017954bf8da94c9a7621c534ee0a789d6cf30971488d12814c1