inference-sh-cli

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Anomaly
AnomalyLOW
references/authentication.md

No direct malicious payload is present in the supplied documentation. However, the curl-to-shell installation and update commands create a significant supply-chain execution risk because arbitrary remote content is executed without checksum or signature verification. The actual installer and CLI require separate review, particularly for credential storage and network behavior.

Confidence: 98%Severity: 62%
Audit Metadata
Analyzed At
Oct 2, 2026, 04:03 PM
Package URL
pkg:socket/skills-sh/nousresearch%2Fhermes-agent%2Finference-sh-cli%2F@61c7442c1e2b330c9aa3bfc91f04ef24d11b728724173af0ee999fa0a3f752f0