infsh-cli

All 203 static analysis findings are false positives. The skill consists entirely of markdown documentation files with bash code examples. Patterns flagged as 'external_commands' are markdown code blocks (triple-backtick syntax), not executable code. 'Network' findings are documentation URLs for the inference.sh platform. 'Pipe to shell' references show the standard documented install method (curl | sh) from the official inference.sh domain. 'API key' findings reference environment variable documentation, not actual credential exposure. 'Weak cryptographic algorithm' findings reference sha256sum checksum verification, which is appropriate. No executable code or malicious intent detected. Low risk assigned because the skill permits Bash execution of the infsh CLI, which makes network requests and requires API credentials.