infsh-cli

SUSPICIOUS. The skill is broadly coherent with its stated purpose and the installer appears to be officially operated by inference.sh, so this is not strong evidence of malware. However, it combines remote CLI installation, credential handling through external tooling, automatic local file uploads, wildcard Bash-mediated CLI access, transitive skill installation, and autonomous Twitter/X actions, making the overall security exposure medium-high.