inference-sh-cli

Warn

Audited by Socket on Sep 5, 2026

1 alert found:

Anomaly
AnomalyLOW
references/authentication.md

No direct malicious payload is present in the supplied documentation. However, the curl-to-shell installation and update commands create a significant supply-chain execution risk because arbitrary remote content is executed without checksum or signature verification. The actual installer and CLI require separate review, particularly for credential storage and network behavior.

Confidence: 98%Severity: 62%
Audit Metadata
Analyzed At
Sep 5, 2026, 12:07 PM
Package URL
pkg:socket/skills-sh/zapabob%2Fskills%2Finference-sh-cli%2F@9b8561ce8ffcc15eef17bb6cc1d0b8a55c2bff7160556b3eba715f82357ff3f4