building-inferencesh-apps
Fail
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides installation commands that download and execute code directly from the internet via shell piping. This pattern is found for the belt CLI, the uv package manager, and Node.js version managers.\n
- Evidence:
curl -fsSL https://cli.inference.sh | shin SKILL.md and references/cli.md.\n - Evidence:
curl -LsSf https://astral.sh/uv/install.sh | shin references/cli.md.\n - Evidence:
curl -fsSL https://fnm.vercel.app/install | bashin references/cli.md.\n - Evidence:
curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.0/install.sh | bashin references/cli.md.\n- [PRIVILEGE_ESCALATION]: The skill includes a Windows installation command for the uv tool that uses the ExecutionPolicy Bypass flag to circumvent system-level security restrictions on script execution.\n - Evidence:
powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex"in references/cli.md.\n- [COMMAND_EXECUTION]: The skill directs the agent to perform multiple system-level operations using the belt CLI and Node.js package runners to scaffold, test, and deploy applications.\n - Evidence:
npx skills add belt-sh/cliin SKILL.md.\n - Evidence: Commands such as
belt app init,belt app test, andbelt app deployare used throughout the skill instructions.\n- [EXTERNAL_DOWNLOADS]: The skill depends on numerous third-party libraries and tools downloaded from external repositories and registries during the application lifecycle.\n - Evidence: References to Node.js packages including zod, sharp, and @inferencesh/app.\n
- Evidence: References to Python packages including torch, transformers, accelerate, and inferencesh.
Recommendations
- HIGH: Downloads and executes remote code from: https://cli.inference.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata