inference-sh-cli
Warn
Audited by Socket on May 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill is broadly coherent with its stated purpose and uses same-org inference.sh endpoints, so it does not look overtly malicious. Risk comes from the official-but-unsafe `curl|sh` installer, credential use through an external CLI, local file upload to cloud services, and possible social automation actions without explicit approval controls.
Confidence: 83%Severity: 56%
Audit Metadata