inference-sh-cli

Warn

Audited by Socket on May 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is broadly coherent with its stated purpose and uses same-org inference.sh endpoints, so it does not look overtly malicious. Risk comes from the official-but-unsafe `curl|sh` installer, credential use through an external CLI, local file upload to cloud services, and possible social automation actions without explicit approval controls.

Confidence: 83%Severity: 56%
Audit Metadata
Analyzed At
May 16, 2026, 01:46 PM
Package URL
pkg:socket/skills-sh/NousResearch%2Fhermes-agent%2Finference-sh-cli%2F@2808afe19326d3ed1131fe5dd4056ca5b8641d09
Security Audit — socket — inference-sh-cli