infsh-cli
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the user/agent to install the CLI tool using
curl -fsSL https://cli.inference.sh | sh. While this is a common installation pattern for developer tools, it involves executing a remote script. The skill provides an alternative manual installation method with SHA-256 checksum verification and Sigstore signature checks ifcosignis installed, which follows security best practices. - [EXTERNAL_DOWNLOADS]: The skill downloads binaries and configuration manifests from
dist.inference.sh. These resources are hosted on the service provider's infrastructure and are used for the intended purpose of the skill. - [COMMAND_EXECUTION]: The skill uses the
Bashtool to interact with thebeltCLI. It facilitates commands for image/video generation, model querying, and system configuration. The!command syntax is not used maliciously; the references to shell commands are instructional for the agent or user.
Audit Metadata