The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references an external installation script at https://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md for the required infsh CLI tool.
[EXTERNAL_DOWNLOADS]: The skill instructions encourage the addition of further skills from the inference-sh GitHub organization using the command npx skills add, which involves fetching and potentially executing code from a remote repository.
[COMMAND_EXECUTION]: The skill relies on the execution of the infsh CLI tool through Bash to perform image generation and account management tasks (infsh login, infsh app run).
[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes user-supplied prompts and external image URLs without explicit sanitization or boundary markers before passing them to the underlying CLI tool.
Ingestion points: User-provided prompt and images URL array in the infsh app run command inputs.
Boundary markers: Absent; the user content is directly interpolated into a JSON string within a shell command.
Capability inventory: Execution of the infsh CLI via Bash, including network interaction with the inference.sh API.
Sanitization: No validation or sanitization of the input strings is evidenced in the skill instructions.

nano-banana