infsh-cli

SUSPICIOUS. The core capability is coherent with a cloud AI CLI, and the installer appears to be an official inference.sh distribution path rather than an obviously rogue payload. However, the skill adds meaningful risk through transitive skill installation (`belt-sh/cli` and many follow-on skills), credential use via an external CLI, automatic local file uploads, and support for autonomous public X/Twitter actions. This looks more like a risky developer workflow skill than confirmed malware.