스킬 infsh-cli
📦

infsh-cli

콘텐츠 리비전 r1 치명적 🌐 네트워크 접근🔑 환경 변수📁 파일 시스템 접근⚙️ 외부 명령어

Ejecuta apps de IA con inference.sh CLI

Los flujos de trabajo de IA suelen requerir APIs separadas para imágenes, video, búsqueda y modelos de lenguaje. Esta skill ayuda a Claude, Codex y Claude Code a descubrir y ejecutar apps de inference.sh mediante belt CLI.

지원: Claude Codex Code(CC)
Maintain this Skill? Claim it ⚠️ 38 나쁨

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청
Review the Skillstore skill "infsh-cli" from https://skillstore.io/skills/inference-skills-infsh-cli.md and its manifest at https://skillstore.io/api/skills/inference-skills-infsh-cli/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

테스트해 보기

"infsh-cli" 사용 중입니다. Encuentra opciones de generación de imágenes para un flujo de trabajo rápido de arte conceptual.

예상 결과:

  • Una lista breve de apps de imagen coincidentes por velocidad y calidad.
  • Una recomendación del primer modelo que probar.
  • Notas sobre campos de prompt obligatorios y la salida multimedia esperada.

"infsh-cli" 사용 중입니다. Ejecuta una tarea larga de generación de video y revísala más tarde.

예상 결과:

El asistente envía la tarea, registra el ID de tarea, verifica el estado más tarde y resume la ubicación final del resultado de video.

"infsh-cli" 사용 중입니다. Prepara una carga segura de medios locales.

예상 결과:

  • Una solicitud de aprobación antes de subir cualquier archivo local.
  • Una lista clara de las rutas de archivos seleccionadas.
  • Una advertencia cuando una ruta apunta fuera del directorio de trabajo.

보안 감사

치명적
v4 • 2026. 7. 5. 버전별 보고서 열기

AI review confirmed critical supply-chain risk from curl-to-shell installer instructions and shell-derived binary downloads. Many Markdown backtick and documentation URL matches are false positives, but the skill also documents cloud uploads of local files and social media actions. No prompt injection attempt was found.

5
스캔된 파일
596
분석된 줄 수
11
검토 항목
0
오탐 무시됨

확인된 보안 우려 사항 (6)

치명적
Pipe to shell pattern
curl -fsSL https://cli.inference.sh | sh
The line pipes a remote installer directly into sh. A changed or intercepted network response would become executable code on the user machine.
치명적
Pipe to shell pattern
curl -fsSL https://cli.inference.sh | sh
The line pipes a remote installer directly into sh. A changed or intercepted network response would become executable code on the user machine.
치명적
Pipe to shell pattern
curl -fsSL https://cli.inference.sh | sh
The line pipes a remote installer directly into sh. A changed or intercepted network response would become executable code on the user machine.
치명적
Pipe to shell pattern
curl -fsSL https://cli.inference.sh | sh
The line pipes a remote installer directly into sh. A changed or intercepted network response would become executable code on the user machine.
높음
Automatic Local File Uploads to Cloud Apps
The instructions state that URL fields also accept local paths and that the CLI automatically uploads those files. This can expose sensitive local files to inference.sh if an agent selects paths without explicit user consent.
The files explicitly describe automatic upload of local paths, including absolute, parent-directory, and home-directory examples. The behavior is central to the documented workflow.
중간
Automated Social Media Account Actions
The skill advertises Twitter/X automation and examples for posting media. Commands can post, send messages, follow, like, or retweet through external apps without a built-in confirmation step.
The capability is directly listed in the skill examples and available categories. Legitimate use is possible, but unintended account actions are a clear business-logic risk.
기능 검토 항목 (11)

이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.

높음
Path traversal sequence
- Relative paths: `./image.png`, `../data/video.mp4`
The documentation says parent-directory paths can be provided for cloud uploads. That can expose files outside the intended working directory if selected carelessly.
높음
Shell command substitution
> curl -LO $(curl -fsSL https://dist.inference.sh/cli/manifest.json | grep -o '"url":"[^"]*"' | grep
The manual install command uses command substitution around a remote manifest and shell filters to choose a binary URL. If manipulated, it may download an unintended executable.
높음
Template literal with command substitution
> ```bash
Although the static pattern names a template literal, this block contains shell substitution that derives a download URL from a remote manifest. That is a supply-chain install risk.
높음
Hidden file in home directory
> mv inferencesh-cli-* ~/.local/bin/inferencesh
The manual install flow moves a downloaded binary into ~/.local/bin, a user PATH location. Combined with remote downloads, this can persist an untrusted executable.
중간
Hardcoded URL
curl -fsSL https://cli.inference.sh | sh
The URL is part of a CLI installer command that fetches executable content from inference.sh. This creates a network supply-chain dependency even if the domain appears intended.
중간
Hardcoded URL
curl -fsSL https://cli.inference.sh | sh
The URL is part of a CLI installer command that fetches executable content from inference.sh. This creates a network supply-chain dependency even if the domain appears intended.
중간
Hardcoded URL
curl -fsSL https://cli.inference.sh | sh
The URL is part of a CLI installer command that fetches executable content from inference.sh. This creates a network supply-chain dependency even if the domain appears intended.
중간
Hardcoded URL
curl -fsSL https://cli.inference.sh | sh
The URL is part of a CLI installer command that fetches executable content from inference.sh. This creates a network supply-chain dependency even if the domain appears intended.
중간
Hardcoded URL
> curl -LO https://dist.inference.sh/cli/checksums.txt
The manual install instructions download checksum data from a hardcoded distribution host. This is expected but still part of the binary supply-chain flow.
중간
Hardcoded URL
> curl -LO $(curl -fsSL https://dist.inference.sh/cli/manifest.json | grep -o '"url":"[^"]*"' | grep
The command fetches a remote manifest and uses it to download a CLI binary. This creates a supply-chain dependency on the manifest and distribution host.
중간
Hidden file access
> mv inferencesh-cli-* ~/.local/bin/inferencesh
The command writes into a hidden home-directory path used for executables. This is normal for user installs, but it is still a persistence-sensitive filesystem change.

감지된 패턴

Pipe to shell pattern×4
감사자: codex 감사 이력 보기 →
이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기
보안 평가

보고서 링크 복사

https://skillstore.io/skills/inference-skills-infsh-cli/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/inference-skills-infsh-cli/security.svg)](https://skillstore.io/skills/inference-skills-infsh-cli?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/inference-skills-infsh-cli?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/inference-skills-infsh-cli/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/inference-skills-infsh-cli.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
학술 인용 (APA · BibTeX · CFF)

APA 인용

inference-skills. (2026). infsh-cli security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/inference-skills-infsh-cli/audits/4

BibTeX 인용

@techreport{inference-skills-inference-skills-infsh-cli-2026, author = {inference-skills}, title = {infsh-cli security audit report (audit version 4)}, institution = {Skillstore}, year = {2026}, number = {4}, url = {https://skillstore.io/skills/inference-skills-infsh-cli/audits/4}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "infsh-cli security audit report (audit version 4)" version: "unspecified" type: report authors: - name: "inference-skills" date-released: "2026-07-05" url: "https://skillstore.io/skills/inference-skills-infsh-cli/audits/4" identifiers: - type: other value: "skillstore:inference-skills-infsh-cli:audit:4" description: "Skillstore immutable audit report identifier"

변형 비교

설치 가능한 변형 9개

각 작성자의 스킬은 별도의 설치 항목으로 유지됩니다. 추천 변형은 Skillstore 근거로 순위가 정해집니다.

이 변형이 1위인 이유

Skillstore 사용량이 더 높음
inferen-sh 권장

inferen-sh-infsh-cli

Skillstore 점수 38
증거 신뢰도 중간
Skillstore 사용량 79
업데이트됨

2026-09-09

qu-skills-infsh-cli

Skillstore 점수 38
증거 신뢰도 중간
Skillstore 사용량 55
업데이트됨

2026-09-09

tool-belt-infsh-cli

Skillstore 점수 38
증거 신뢰도 중간
Skillstore 사용량 50
업데이트됨

2026-09-09

inference-skills-infsh-cli

Skillstore 점수 38
증거 신뢰도 중간
Skillstore 사용량 47
업데이트됨

2026-09-09

skillssh-infsh-cli

Skillstore 점수 38
증거 신뢰도 중간
Skillstore 사용량 45
업데이트됨

2026-09-09

infsh-skills-infsh-cli

Skillstore 점수 38
증거 신뢰도 중간
Skillstore 사용량 44
업데이트됨

2026-09-09

inference-sh-skills-infsh-cli

Skillstore 점수 38
증거 신뢰도 중간
Skillstore 사용량 43
업데이트됨

2026-09-09

halt-catch-fire-infsh-cli

Skillstore 점수 38
증거 신뢰도 중간
Skillstore 사용량 35
업데이트됨

2026-09-09

101-skills-infsh-cli

Skillstore 점수 38
증거 신뢰도 중간
Skillstore 사용량 10
업데이트됨

2026-10-12

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간
45
아키텍처
85
유지보수성
87
콘텐츠
68
커뮤니티
91
사양 준수

만들 수 있는 것

Crear recursos multimedia

Genera imágenes, videos, audio o avatares desde un flujo de trabajo CLI consistente.

Prototipar flujos de trabajo de IA

Compara esquemas de apps, genera entradas de ejemplo y prueba rápidamente tareas de IA en la nube.

Buscar y analizar información

Ejecuta apps alojadas de búsqueda y lenguaje para investigación, resúmenes y respuestas estructuradas.

이 프롬프트를 사용해 보세요

Encontrar apps útiles
Usa infsh-cli para encontrar apps de generación de imágenes para mockups de productos. Muestra opciones útiles y explica cuándo elegir cada una.
Preparar entrada de ejemplo
Usa infsh-cli para inspeccionar google/veo-3-1-fast y crear un plan de entrada de ejemplo para un video corto de producto. Pregunta antes de ejecutarlo.
Ejecutar y hacer seguimiento de una tarea
Usa infsh-cli para ejecutar falai/flux-dev-lora para esta idea de imagen: [describe image]. Haz seguimiento de la tarea y resume la ubicación del resultado.
Comparar un flujo de trabajo completo
Usa infsh-cli para comparar dos apps de imagen y dos apps de video para una campaña de lanzamiento. Incluye entradas, pasos del flujo de trabajo y comprobaciones de seguridad.

모범 사례

  • Inspecciona los detalles de la app y las entradas de ejemplo antes de ejecutar una app nueva.
  • Pide aprobación del usuario antes de cargas, acciones sociales o tareas pagadas de larga duración.
  • Almacena las claves de API de forma segura y evita poner secretos en prompts o archivos de entrada guardados.

피하기

  • No ejecutes comandos de instalación desde scripts remotos sin verificación.
  • No subas rutas locales amplias, directorios superiores ni archivos privados sin consentimiento.
  • No publiques, envíes mensajes, sigas, des me gusta ni hagas retweet sin una confirmación final del usuario.

자주 묻는 질문

¿Qué CLI usa esta skill?
Usa la CLI belt de inference.sh para descubrir apps, ejecutar tareas y recuperar resultados de tareas.
¿Necesito una cuenta de inference.sh?
Sí. La mayoría de los comandos requieren que la CLI esté instalada y autenticada con una cuenta o clave de API.
¿Puede generar imágenes y videos?
Sí. Las referencias enumeran categorías de apps de imagen, video, audio, lenguaje, búsqueda, 3D y utilidades.
¿Puede usar archivos locales?
Sí. Algunas apps aceptan rutas locales, y la CLI sube esos archivos a servicios en la nube.
¿Ejecuta modelos localmente?
No. Envía trabajos a apps en la nube de inference.sh y devuelve salidas de tareas o enlaces a archivos alojados.
¿Qué debo confirmar antes de ejecutar comandos?
Confirma cargas, tareas pagadas o de larga duración, acciones en redes sociales y cualquier comando de instalación o actualización.

개발자 세부 정보

라이선스

MIT

Skillstore 리비전

r1

버전 안내

작성자가 버전을 선언하지 않았습니다.

참조

a25199bc7d6b82598536822d1738eb5d5f54025b

유지보수 최신성

2026. 7. 18.

사용량

4 다운로드 · 87 조회

inference-skills의 다른 스킬

전체 보기
전체 보기