infsh-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's SKILL.md explicitly shows running web/search apps (e.g., "belt app run tavily/search-assistant --input '{"query": "latest AI news"}'") and the running-apps docs describe returning external URLs/results, meaning the agent will ingest and act on untrusted public web content from third‑party sources (web search/results), which could influence subsequent actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill instructs users to run a remote installer with "curl -fsSL https://cli.inference.sh | sh", which fetches and executes remote code and is presented as the required CLI installation for using the skill.