{"data":{"skill":{"slug":"101-skills-infsh-cli","name":"infsh-cli","icon":"📦","repo":"https://github.com/101-skills/skills/tree/main/tools/infsh-cli/","status":"approved","author":"101-skills","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"1c5bee45-181f-4687-ad1d-15f891ca90e9","skill_id":"ad76e264-c244-4df4-bc02-c52537f288c1","version":3,"content_hash":"v2:b959ebfd1043a07c0c4378ab94ca4342cb0259f5:2470af966c80070ac8e0bb46ab4483ea0bde299350e6c648b1fbe8832543b4ef:47ca9bb012ea76cbeb22da5d6b9d66913f31cc08883162a9b73224101243951a:f1aec70cd67f568fe5cd11c9c33aef3a","risk_level":"critical","is_blocked":true,"safe_to_publish":false,"analysis_status":"ok","agent_auto_install_policy":"blocked","manual_install_policy":"allowed_with_warning","summary":"Most static hits are Markdown examples or documentation links, not executable skill code. The confirmed risk is installer guidance that pipes a remote script into sh, plus one manual install command that derives a download URL through shell substitution. I found no prompt-injection text or covert data-exfiltration instructions in the reviewed files.","remediation":[{"issue":"Remote script is piped directly to sh in install instructions.","severity":"critical","suggestion":"Replace pipe-to-shell commands with a checksum-verified download process and tell users to inspect installer scripts before running them."},{"issue":"Manual install instructions build a download command from a remote manifest.","severity":"medium","suggestion":"Publish explicit release asset links and checksum steps for each supported platform, or require users to inspect the manifest before download."},{"issue":"The skill documents workflows that upload local files to cloud apps.","severity":"medium","suggestion":"Add explicit confirmation guidance before any command uses absolute, relative, parent, or home-directory file paths."}],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":"references/authentication.md","line_end":6,"line_start":6},{"file":"references/authentication.md","line_end":44,"line_start":44},{"file":"references/cli-reference.md","line_end":6,"line_start":6},{"file":"references/running-apps.md","line_end":152,"line_start":152},{"file":"SKILL.md","line_end":9,"line_start":9},{"file":"SKILL.md","line_end":13,"line_start":13},{"file":"SKILL.md","line_end":18,"line_start":18},{"file":"SKILL.md","line_end":22,"line_start":22},{"file":"SKILL.md","line_end":27,"line_start":27},{"file":"SKILL.md","line_end":28,"line_start":28},{"file":"SKILL.md","line_end":141,"line_start":141},{"file":"SKILL.md","line_end":142,"line_start":142},{"file":"SKILL.md","line_end":143,"line_start":143},{"file":"SKILL.md","line_end":144,"line_start":144},{"file":"SKILL.md","line_end":145,"line_start":145},{"file":"SKILL.md","line_end":146,"line_start":146},{"file":"SKILL.md","line_end":147,"line_start":147}]},{"factor":"env_access","evidence":[{"file":"references/authentication.md","line_end":30,"line_start":30},{"file":"references/authentication.md","line_end":53,"line_start":53},{"file":"references/cli-reference.md","line_end":79,"line_start":79}]},{"factor":"filesystem","evidence":[{"file":"references/cli-reference.md","line_end":91,"line_start":91},{"file":"references/cli-reference.md","line_end":91,"line_start":91},{"file":"references/running-apps.md","line_end":41,"line_start":41},{"file":"SKILL.md","line_end":33,"line_start":33},{"file":"SKILL.md","line_end":33,"line_start":33}]},{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":7,"line_start":7},{"file":"SKILL.md","line_end":20,"line_start":17},{"file":"SKILL.md","line_end":22,"line_start":20},{"file":"SKILL.md","line_end":25,"line_start":22},{"file":"SKILL.md","line_end":34,"line_start":25},{"file":"SKILL.md","line_end":38,"line_start":34},{"file":"SKILL.md","line_end":56,"line_start":38},{"file":"SKILL.md","line_end":62,"line_start":56},{"file":"SKILL.md","line_end":74,"line_start":62},{"file":"SKILL.md","line_end":80,"line_start":74},{"file":"SKILL.md","line_end":81,"line_start":80},{"file":"SKILL.md","line_end":82,"line_start":81},{"file":"SKILL.md","line_end":83,"line_start":82},{"file":"SKILL.md","line_end":84,"line_start":83},{"file":"SKILL.md","line_end":85,"line_start":84},{"file":"SKILL.md","line_end":86,"line_start":85},{"file":"SKILL.md","line_end":87,"line_start":86},{"file":"SKILL.md","line_end":88,"line_start":87},{"file":"SKILL.md","line_end":104,"line_start":88},{"file":"SKILL.md","line_end":130,"line_start":104},{"file":"SKILL.md","line_end":28,"line_start":28},{"file":"SKILL.md","line_end":34,"line_start":25}]}],"critical_findings":[{"title":"Pipe to shell pattern","locations":[{"file":"references/authentication.md","line_end":6,"line_start":6}],"confidence":0.93,"description":"curl -fsSL https://cli.inference.sh | sh","review_kind":"security","source_category":"blocker","source_severity":"critical","confidence_reasoning":"The command pipes remote HTTPS content directly to sh as an installation step. A compromised endpoint or installer would execute arbitrary code on the user system."},{"title":"Pipe to shell pattern","locations":[{"file":"references/authentication.md","line_end":44,"line_start":44}],"confidence":0.93,"description":"curl -fsSL https://cli.inference.sh | sh","review_kind":"security","source_category":"blocker","source_severity":"critical","confidence_reasoning":"The command pipes remote HTTPS content directly to sh as an installation step. A compromised endpoint or installer would execute arbitrary code on the user system."},{"title":"Pipe to shell pattern","locations":[{"file":"references/cli-reference.md","line_end":6,"line_start":6}],"confidence":0.93,"description":"curl -fsSL https://cli.inference.sh | sh","review_kind":"security","source_category":"blocker","source_severity":"critical","confidence_reasoning":"The command pipes remote HTTPS content directly to sh as an installation step. A compromised endpoint or installer would execute arbitrary code on the user system."},{"title":"Pipe to shell pattern","locations":[{"file":"SKILL.md","line_end":18,"line_start":18}],"confidence":0.93,"description":"curl -fsSL https://cli.inference.sh | sh","review_kind":"security","source_category":"blocker","source_severity":"critical","confidence_reasoning":"The command pipes remote HTTPS content directly to sh as an installation step. A compromised endpoint or installer would execute arbitrary code on the user system."}],"high_findings":[],"medium_findings":[{"title":"Shell command substitution","locations":[{"file":"SKILL.md","line_end":28,"line_start":28}],"confidence":0.66,"description":"> curl -LO $(curl -fsSL https://dist.inference.sh/cli/manifest.json | grep -o '\"url\":\"[^\"]*\"' | grep","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The manual install command evaluates a subshell that fetches a remote manifest and selects a download URL. This is installation guidance, but remote-controlled download selection is a supply-chain risk."}],"low_findings":[],"dangerous_patterns":[{"title":"Pipe to shell pattern","locations":[{"file":"references/authentication.md","line_end":6,"line_start":6}],"confidence":0.93,"description":"curl -fsSL https://cli.inference.sh | sh","review_kind":"security","source_category":"blocker","source_severity":"critical","confidence_reasoning":"The command pipes remote HTTPS content directly to sh as an installation step. A compromised endpoint or installer would execute arbitrary code on the user system."},{"title":"Pipe to shell pattern","locations":[{"file":"references/authentication.md","line_end":44,"line_start":44}],"confidence":0.93,"description":"curl -fsSL https://cli.inference.sh | sh","review_kind":"security","source_category":"blocker","source_severity":"critical","confidence_reasoning":"The command pipes remote HTTPS content directly to sh as an installation step. A compromised endpoint or installer would execute arbitrary code on the user system."},{"title":"Pipe to shell pattern","locations":[{"file":"references/cli-reference.md","line_end":6,"line_start":6}],"confidence":0.93,"description":"curl -fsSL https://cli.inference.sh | sh","review_kind":"security","source_category":"blocker","source_severity":"critical","confidence_reasoning":"The command pipes remote HTTPS content directly to sh as an installation step. A compromised endpoint or installer would execute arbitrary code on the user system."},{"title":"Pipe to shell pattern","locations":[{"file":"SKILL.md","line_end":18,"line_start":18}],"confidence":0.93,"description":"curl -fsSL https://cli.inference.sh | sh","review_kind":"security","source_category":"blocker","source_severity":"critical","confidence_reasoning":"The command pipes remote HTTPS content directly to sh as an installation step. A compromised endpoint or installer would execute arbitrary code on the user system."}],"files_scanned":5,"total_lines":608,"audit_model":"codex","audited_at":"2026-07-08T14:33:17.723+00:00","created_at":"2026-07-10T12:22:02.607613+00:00","static_findings":[{"id":"network:references/authentication.md:6:hardcoded-url","file":"references/authentication.md","pattern":"Hardcoded URL","snippet":"curl -fsSL https://cli.inference.sh | sh","category":"network","line_end":6,"severity":"low","line_start":6},{"id":"network:references/authentication.md:44:hardcoded-url","file":"references/authentication.md","pattern":"Hardcoded URL","snippet":"curl -fsSL https://cli.inference.sh | sh","category":"network","line_end":44,"severity":"low","line_start":44},{"id":"env_access:references/authentication.md:30:generic-api-secret-keys","file":"references/authentication.md","pattern":"Generic API/secret keys","snippet":"export INFSH_API_KEY=your-api-key","category":"env_access","line_end":30,"severity":"high","line_start":30},{"id":"env_access:references/authentication.md:53:generic-api-secret-keys","file":"references/authentication.md","pattern":"Generic API/secret keys","snippet":"| \"API key invalid\" | Check `INFSH_API_KEY` or re-login |","category":"env_access","line_end":53,"severity":"high","line_start":53},{"id":"blocker:references/authentication.md:6:pipe-to-shell-pattern","file":"references/authentication.md","pattern":"Pipe to shell pattern","snippet":"curl -fsSL https://cli.inference.sh | sh","category":"blocker","line_end":6,"severity":"critical","line_start":6},{"id":"blocker:references/authentication.md:44:pipe-to-shell-pattern","file":"references/authentication.md","pattern":"Pipe to shell pattern","snippet":"curl -fsSL https://cli.inference.sh | sh","category":"blocker","line_end":44,"severity":"critical","line_start":44},{"id":"network:references/cli-reference.md:6:hardcoded-url","file":"references/cli-reference.md","pattern":"Hardcoded URL","snippet":"curl -fsSL https://cli.inference.sh | sh","category":"network","line_end":6,"severity":"low","line_start":6},{"id":"filesystem:references/cli-reference.md:91:hidden-file-in-home-directory","file":"references/cli-reference.md","pattern":"Hidden file in home directory","snippet":"belt completion fish > ~/.config/fish/completions/infsh.fish","category":"filesystem","line_end":91,"severity":"high","line_start":91},{"id":"filesystem:references/cli-reference.md:91:hidden-file-access","file":"references/cli-reference.md","pattern":"Hidden file access","snippet":"belt completion fish > ~/.config/fish/completions/infsh.fish","category":"filesystem","line_end":91,"severity":"medium","line_start":91},{"id":"env_access:references/cli-reference.md:79:generic-api-secret-keys","file":"references/cli-reference.md","pattern":"Generic API/secret keys","snippet":"| `INFSH_API_KEY` | API key (overrides config) |","category":"env_access","line_end":79,"severity":"high","line_start":79},{"id":"blocker:references/cli-reference.md:6:pipe-to-shell-pattern","file":"references/cli-reference.md","pattern":"Pipe to shell pattern","snippet":"curl -fsSL https://cli.inference.sh | sh","category":"blocker","line_end":6,"severity":"critical","line_start":6},{"id":"network:references/running-apps.md:152:hardcoded-url","file":"references/running-apps.md","pattern":"Hardcoded URL","snippet":"\"url\": \"https://cloud.inference.sh/...\",","category":"network","line_end":152,"severity":"low","line_start":152},{"id":"filesystem:references/running-apps.md:41:path-traversal-sequence","file":"references/running-apps.md","pattern":"Path traversal sequence","snippet":"- Relative paths: `./image.png`, `../data/video.mp4`","category":"filesystem","line_end":41,"severity":"high","line_start":41},{"id":"blocker:references/running-apps.md:163:system-reconnaissance","file":"references/running-apps.md","pattern":"System reconnaissance","snippet":"| \"invalid input\" | Schema mismatch | Check `belt app get` for required fields |","category":"blocker","line_end":163,"severity":"low","line_start":163},{"id":"external_commands:SKILL.md:7:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> **Install the belt CLI skill:** `npx skills add belt-sh/cli`","category":"external_commands","line_end":7,"severity":"medium","line_start":7},{"id":"external_commands:SKILL.md:17:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":20,"severity":"medium","line_start":17},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":22,"severity":"medium","line_start":20},{"id":"external_commands:SKILL.md:22:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> **What does the installer do?** The [install script](https://cli.inference.sh) detects your OS and","category":"external_commands","line_end":25,"severity":"medium","line_start":22},{"id":"external_commands:SKILL.md:25:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> ```bash","category":"external_commands","line_end":34,"severity":"medium","line_start":25},{"id":"external_commands:SKILL.md:34:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> ```","category":"external_commands","line_end":38,"severity":"medium","line_start":34},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":56,"severity":"medium","line_start":38},{"id":"external_commands:SKILL.md:56:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":62,"severity":"medium","line_start":56},{"id":"external_commands:SKILL.md:62:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":74,"severity":"medium","line_start":62},{"id":"external_commands:SKILL.md:74:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":80,"severity":"medium","line_start":74},{"id":"external_commands:SKILL.md:80:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Browse the app store | `belt app store` |","category":"external_commands","line_end":81,"severity":"medium","line_start":80},{"id":"external_commands:SKILL.md:81:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Search the store | `belt app store search \"flux\"` |","category":"external_commands","line_end":82,"severity":"medium","line_start":81},{"id":"external_commands:SKILL.md:82:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Filter by category | `belt app store --category image` |","category":"external_commands","line_end":83,"severity":"medium","line_start":82},{"id":"external_commands:SKILL.md:83:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| List your apps | `belt app list` |","category":"external_commands","line_end":84,"severity":"medium","line_start":83},{"id":"external_commands:SKILL.md:84:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Get app details | `belt app get google/veo-3-1-fast` |","category":"external_commands","line_end":85,"severity":"medium","line_start":84},{"id":"external_commands:SKILL.md:85:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Generate sample input | `belt app sample google/veo-3-1-fast --save input.json` |","category":"external_commands","line_end":86,"severity":"medium","line_start":85},{"id":"external_commands:SKILL.md:86:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Run app | `belt app run google/veo-3-1-fast --input input.json` |","category":"external_commands","line_end":87,"severity":"medium","line_start":86},{"id":"external_commands:SKILL.md:87:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Run without waiting | `belt app run <app> --input input.json --no-wait` |","category":"external_commands","line_end":88,"severity":"medium","line_start":87},{"id":"external_commands:SKILL.md:88:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Check task status | `belt task get <task-id>` |","category":"external_commands","line_end":104,"severity":"medium","line_start":88},{"id":"external_commands:SKILL.md:104:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":130,"severity":"medium","line_start":104},{"id":"external_commands:SKILL.md:28:shell-command-substitution","file":"SKILL.md","pattern":"Shell command substitution","snippet":"> curl -LO $(curl -fsSL https://dist.inference.sh/cli/manifest.json | grep -o '\"url\":\"[^\"]*\"' | grep","category":"external_commands","line_end":28,"severity":"medium","line_start":28},{"id":"external_commands:SKILL.md:25:template-literal-with-command-substitution","file":"SKILL.md","pattern":"Template literal with command substitution","snippet":"> ```bash","category":"external_commands","line_end":34,"severity":"medium","line_start":25},{"id":"network:SKILL.md:9:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"# [inference.sh](https://inference.sh)","category":"network","line_end":9,"severity":"low","line_start":9},{"id":"network:SKILL.md:13:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"![[inference.sh](https://inference.sh)](https://cloud.inference.sh/app/files/u/4mg21r6ta37mpaz6ktzwt","category":"network","line_end":13,"severity":"low","line_start":13},{"id":"network:SKILL.md:18:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"curl -fsSL https://cli.inference.sh | sh","category":"network","line_end":18,"severity":"low","line_start":18},{"id":"network:SKILL.md:22:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"> **What does the installer do?** The [install script](https://cli.inference.sh) detects your OS and","category":"network","line_end":22,"severity":"low","line_start":22},{"id":"network:SKILL.md:27:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"> curl -LO https://dist.inference.sh/cli/checksums.txt","category":"network","line_end":27,"severity":"low","line_start":27},{"id":"network:SKILL.md:28:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"> curl -LO $(curl -fsSL https://dist.inference.sh/cli/manifest.json | grep -o '\"url\":\"[^\"]*\"' | grep","category":"network","line_end":28,"severity":"low","line_start":28},{"id":"network:SKILL.md:141:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [Agent Skills Overview](https://inference.sh/blog/skills/skills-overview) - The open standard for ","category":"network","line_end":141,"severity":"low","line_start":141},{"id":"network:SKILL.md:142:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [Getting Started](https://inference.sh/docs/getting-started/introduction) - Introduction to infere","category":"network","line_end":142,"severity":"low","line_start":142},{"id":"network:SKILL.md:143:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [What is inference.sh?](https://inference.sh/docs/getting-started/what-is-inference) - Platform ov","category":"network","line_end":143,"severity":"low","line_start":143},{"id":"network:SKILL.md:144:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [Apps Overview](https://inference.sh/docs/apps/overview) - Understanding the app ecosystem","category":"network","line_end":144,"severity":"low","line_start":144},{"id":"network:SKILL.md:145:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [CLI Setup](https://inference.sh/docs/extend/cli-setup) - Installing the CLI","category":"network","line_end":145,"severity":"low","line_start":145},{"id":"network:SKILL.md:146:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [Workflows vs Agents](https://inference.sh/blog/concepts/workflows-vs-agents) - When to use each","category":"network","line_end":146,"severity":"low","line_start":146},{"id":"network:SKILL.md:147:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [Why Agent Runtimes Matter](https://inference.sh/blog/agent-runtime/why-runtimes-matter) - Runtime","category":"network","line_end":147,"severity":"low","line_start":147},{"id":"filesystem:SKILL.md:33:hidden-file-in-home-directory","file":"SKILL.md","pattern":"Hidden file in home directory","snippet":"> mv inferencesh-cli-* ~/.local/bin/inferencesh","category":"filesystem","line_end":33,"severity":"high","line_start":33},{"id":"filesystem:SKILL.md:33:hidden-file-access","file":"SKILL.md","pattern":"Hidden file access","snippet":"> mv inferencesh-cli-* ~/.local/bin/inferencesh","category":"filesystem","line_end":33,"severity":"medium","line_start":33},{"id":"blocker:SKILL.md:18:pipe-to-shell-pattern","file":"SKILL.md","pattern":"Pipe to shell pattern","snippet":"curl -fsSL https://cli.inference.sh | sh","category":"blocker","line_end":18,"severity":"critical","line_start":18}],"finding_verdicts":[{"id":"network:references/authentication.md:6:hardcoded-url","reason":"The hardcoded URL appears in installation documentation for the inference.sh CLI. The executable risk is the separate pipe-to-shell pattern, not the URL by itself.","verdict":"false_positive","confidence":0.88},{"id":"network:references/authentication.md:44:hardcoded-url","reason":"The hardcoded URL appears in installation documentation for the inference.sh CLI. The executable risk is the separate pipe-to-shell pattern, not the URL by itself.","verdict":"false_positive","confidence":0.88},{"id":"env_access:references/authentication.md:30:generic-api-secret-keys","reason":"This is a placeholder API key environment variable example for user configuration. No real secret or embedded credential is present.","verdict":"false_positive","confidence":0.96},{"id":"env_access:references/authentication.md:53:generic-api-secret-keys","reason":"The line names the INFSH_API_KEY variable in documentation or troubleshooting text. It does not expose a secret value or read environment data.","verdict":"false_positive","confidence":0.96},{"id":"blocker:references/authentication.md:6:pipe-to-shell-pattern","reason":"The command pipes remote HTTPS content directly to sh as an installation step. A compromised endpoint or installer would execute arbitrary code on the user system.","verdict":"confirmed","severity":"critical","confidence":0.93},{"id":"blocker:references/authentication.md:44:pipe-to-shell-pattern","reason":"The command pipes remote HTTPS content directly to sh as an installation step. A compromised endpoint or installer would execute arbitrary code on the user system.","verdict":"confirmed","severity":"critical","confidence":0.93},{"id":"network:references/cli-reference.md:6:hardcoded-url","reason":"The hardcoded URL appears in installation documentation for the inference.sh CLI. The executable risk is the separate pipe-to-shell pattern, not the URL by itself.","verdict":"false_positive","confidence":0.88},{"id":"filesystem:references/cli-reference.md:91:hidden-file-in-home-directory","reason":"The command writes Fish shell completions to the standard user configuration directory. This is normal shell setup documentation, not hidden data access.","verdict":"false_positive","confidence":0.92},{"id":"filesystem:references/cli-reference.md:91:hidden-file-access","reason":"The command writes Fish shell completions to the standard user configuration directory. This is normal shell setup documentation, not hidden data access.","verdict":"false_positive","confidence":0.92},{"id":"env_access:references/cli-reference.md:79:generic-api-secret-keys","reason":"The line names the INFSH_API_KEY variable in documentation or troubleshooting text. It does not expose a secret value or read environment data.","verdict":"false_positive","confidence":0.96},{"id":"blocker:references/cli-reference.md:6:pipe-to-shell-pattern","reason":"The command pipes remote HTTPS content directly to sh as an installation step. A compromised endpoint or installer would execute arbitrary code on the user system.","verdict":"confirmed","severity":"critical","confidence":0.93},{"id":"network:references/running-apps.md:152:hardcoded-url","reason":"This is a documentation link to inference.sh resources or an example output URL. It is expected reference material, not a hidden network call.","verdict":"false_positive","confidence":0.95},{"id":"filesystem:references/running-apps.md:41:path-traversal-sequence","reason":"The parent-directory path is a documented local input example, not traversal against an application parser. Local upload risk should be handled through user confirmation, but this line is not exploit evidence.","verdict":"false_positive","confidence":0.82},{"id":"blocker:references/running-apps.md:163:system-reconnaissance","reason":"The line tells users to inspect an app schema after an invalid input error. This is normal CLI troubleshooting, not host or system reconnaissance.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:7:ruby-shell-backtick-execution","reason":"The command appears inside Markdown inline code as optional CLI guidance. It is not Ruby backtick execution and contains no dynamic user input.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:17:ruby-shell-backtick-execution","reason":"This is Markdown documentation around installer commands, not Ruby backtick execution in runnable skill code. The pipe-to-shell installer command is covered by separate confirmed findings.","verdict":"false_positive","confidence":0.88},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","reason":"This is Markdown documentation around installer commands, not Ruby backtick execution in runnable skill code. The pipe-to-shell installer command is covered by separate confirmed findings.","verdict":"false_positive","confidence":0.88},{"id":"external_commands:SKILL.md:22:ruby-shell-backtick-execution","reason":"This is Markdown documentation around installer commands, not Ruby backtick execution in runnable skill code. The pipe-to-shell installer command is covered by separate confirmed findings.","verdict":"false_positive","confidence":0.88},{"id":"external_commands:SKILL.md:25:ruby-shell-backtick-execution","reason":"This is Markdown documentation around installer commands, not Ruby backtick execution in runnable skill code. The pipe-to-shell installer command is covered by separate confirmed findings.","verdict":"false_positive","confidence":0.88},{"id":"external_commands:SKILL.md:34:ruby-shell-backtick-execution","reason":"This is Markdown documentation around installer commands, not Ruby backtick execution in runnable skill code. The pipe-to-shell installer command is covered by separate confirmed findings.","verdict":"false_positive","confidence":0.88},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","reason":"The finding points to Markdown command examples for the belt CLI. These examples are expected skill behavior and contain no dynamic shell evaluation or code injection.","verdict":"false_positive","confidence":0.91},{"id":"external_commands:SKILL.md:56:ruby-shell-backtick-execution","reason":"The finding points to Markdown command examples for the belt CLI. These examples are expected skill behavior and contain no dynamic shell evaluation or code injection.","verdict":"false_positive","confidence":0.91},{"id":"external_commands:SKILL.md:62:ruby-shell-backtick-execution","reason":"The finding points to Markdown command examples for the belt CLI. These examples are expected skill behavior and contain no dynamic shell evaluation or code injection.","verdict":"false_positive","confidence":0.91},{"id":"external_commands:SKILL.md:74:ruby-shell-backtick-execution","reason":"The finding points to Markdown command examples for the belt CLI. These examples are expected skill behavior and contain no dynamic shell evaluation or code injection.","verdict":"false_positive","confidence":0.91},{"id":"external_commands:SKILL.md:80:ruby-shell-backtick-execution","reason":"The finding points to Markdown command examples for the belt CLI. These examples are expected skill behavior and contain no dynamic shell evaluation or code injection.","verdict":"false_positive","confidence":0.91},{"id":"external_commands:SKILL.md:81:ruby-shell-backtick-execution","reason":"The finding points to Markdown command examples for the belt CLI. These examples are expected skill behavior and contain no dynamic shell evaluation or code injection.","verdict":"false_positive","confidence":0.91},{"id":"external_commands:SKILL.md:82:ruby-shell-backtick-execution","reason":"The finding points to Markdown command examples for the belt CLI. These examples are expected skill behavior and contain no dynamic shell evaluation or code injection.","verdict":"false_positive","confidence":0.91},{"id":"external_commands:SKILL.md:83:ruby-shell-backtick-execution","reason":"The finding points to Markdown command examples for the belt CLI. These examples are expected skill behavior and contain no dynamic shell evaluation or code injection.","verdict":"false_positive","confidence":0.91},{"id":"external_commands:SKILL.md:84:ruby-shell-backtick-execution","reason":"The finding points to Markdown command examples for the belt CLI. These examples are expected skill behavior and contain no dynamic shell evaluation or code injection.","verdict":"false_positive","confidence":0.91},{"id":"external_commands:SKILL.md:85:ruby-shell-backtick-execution","reason":"The finding points to Markdown command examples for the belt CLI. These examples are expected skill behavior and contain no dynamic shell evaluation or code injection.","verdict":"false_positive","confidence":0.91},{"id":"external_commands:SKILL.md:86:ruby-shell-backtick-execution","reason":"The finding points to Markdown command examples for the belt CLI. These examples are expected skill behavior and contain no dynamic shell evaluation or code injection.","verdict":"false_positive","confidence":0.91},{"id":"external_commands:SKILL.md:87:ruby-shell-backtick-execution","reason":"The finding points to Markdown command examples for the belt CLI. These examples are expected skill behavior and contain no dynamic shell evaluation or code injection.","verdict":"false_positive","confidence":0.91},{"id":"external_commands:SKILL.md:88:ruby-shell-backtick-execution","reason":"The finding points to Markdown command examples for the belt CLI. These examples are expected skill behavior and contain no dynamic shell evaluation or code injection.","verdict":"false_positive","confidence":0.91},{"id":"external_commands:SKILL.md:104:ruby-shell-backtick-execution","reason":"The finding points to Markdown command examples for the belt CLI. These examples are expected skill behavior and contain no dynamic shell evaluation or code injection.","verdict":"false_positive","confidence":0.91},{"id":"external_commands:SKILL.md:28:shell-command-substitution","reason":"The manual install command evaluates a subshell that fetches a remote manifest and selects a download URL. This is installation guidance, but remote-controlled download selection is a supply-chain risk.","verdict":"confirmed","severity":"medium","confidence":0.66},{"id":"external_commands:SKILL.md:25:template-literal-with-command-substitution","reason":"The flagged range is a quoted Markdown code block, not a JavaScript template literal. The concrete shell substitution inside the block is adjudicated by the line 28 finding.","verdict":"false_positive","confidence":0.83},{"id":"network:SKILL.md:9:hardcoded-url","reason":"This is a documentation link to inference.sh resources or an example output URL. It is expected reference material, not a hidden network call.","verdict":"false_positive","confidence":0.95},{"id":"network:SKILL.md:13:hardcoded-url","reason":"This is a remote image link embedded in Markdown documentation. It does not perform automated data exfiltration or execute code.","verdict":"false_positive","confidence":0.94},{"id":"network:SKILL.md:18:hardcoded-url","reason":"The hardcoded URL appears in installation documentation for the inference.sh CLI. The executable risk is the separate pipe-to-shell pattern, not the URL by itself.","verdict":"false_positive","confidence":0.88},{"id":"network:SKILL.md:22:hardcoded-url","reason":"This is a documentation link to inference.sh resources or an example output URL. It is expected reference material, not a hidden network call.","verdict":"false_positive","confidence":0.95},{"id":"network:SKILL.md:27:hardcoded-url","reason":"The URL is part of manual install documentation for downloading CLI assets. Network access is expected here, and the URL alone does not exfiltrate data.","verdict":"false_positive","confidence":0.86},{"id":"network:SKILL.md:28:hardcoded-url","reason":"The URL is part of manual install documentation for downloading CLI assets. Network access is expected here, and the URL alone does not exfiltrate data.","verdict":"false_positive","confidence":0.86},{"id":"network:SKILL.md:141:hardcoded-url","reason":"This is a documentation link to inference.sh resources or an example output URL. It is expected reference material, not a hidden network call.","verdict":"false_positive","confidence":0.95},{"id":"network:SKILL.md:142:hardcoded-url","reason":"This is a documentation link to inference.sh resources or an example output URL. It is expected reference material, not a hidden network call.","verdict":"false_positive","confidence":0.95},{"id":"network:SKILL.md:143:hardcoded-url","reason":"This is a documentation link to inference.sh resources or an example output URL. It is expected reference material, not a hidden network call.","verdict":"false_positive","confidence":0.95},{"id":"network:SKILL.md:144:hardcoded-url","reason":"This is a documentation link to inference.sh resources or an example output URL. It is expected reference material, not a hidden network call.","verdict":"false_positive","confidence":0.95},{"id":"network:SKILL.md:145:hardcoded-url","reason":"This is a documentation link to inference.sh resources or an example output URL. It is expected reference material, not a hidden network call.","verdict":"false_positive","confidence":0.95},{"id":"network:SKILL.md:146:hardcoded-url","reason":"This is a documentation link to inference.sh resources or an example output URL. It is expected reference material, not a hidden network call.","verdict":"false_positive","confidence":0.95},{"id":"network:SKILL.md:147:hardcoded-url","reason":"This is a documentation link to inference.sh resources or an example output URL. It is expected reference material, not a hidden network call.","verdict":"false_positive","confidence":0.95},{"id":"filesystem:SKILL.md:33:hidden-file-in-home-directory","reason":"The command moves a downloaded CLI binary to a conventional user bin directory under the home folder. It is install guidance, not hidden file collection.","verdict":"false_positive","confidence":0.89},{"id":"filesystem:SKILL.md:33:hidden-file-access","reason":"The command moves a downloaded CLI binary to a conventional user bin directory under the home folder. It is install guidance, not hidden file collection.","verdict":"false_positive","confidence":0.89},{"id":"blocker:SKILL.md:18:pipe-to-shell-pattern","reason":"The command pipes remote HTTPS content directly to sh as an installation step. A compromised endpoint or installer would execute arbitrary code on the user system.","verdict":"confirmed","severity":"critical","confidence":0.93}],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"confirmed_risk_level does not match the canonical trust resolver"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"critical","confirmedFindingCount":4,"capabilityReviewCount":1,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"blocked","manualInstallPolicy":"allowed_with_warning","artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}