building-inferencesh-apps

Warn

Audited by Socket on May 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core purpose is coherent with the capabilities: it is a platform-specific app-development guide centered on the Belt CLI and inference.sh. Main risks are the transitive skill installation and the `curl|sh` installer, but available evidence indicates the installer is officially documented by the same vendor ecosystem rather than an arbitrary third-party payload. No clear malicious data exfiltration or credential harvesting is present.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
May 19, 2026, 07:52 AM
Package URL
pkg:socket/skills-sh/inference-sh%2Fskills%2Fbuilding-inferencesh-apps%2F@4fc798b74241eb95f6218eb81ee9a878528fafa4
Security Audit — socket — building-inferencesh-apps