Skills infsh-cli
๐Ÿ“ฆ

infsh-cli

Content revision r2 Critical ๐ŸŒ Network access๐Ÿ”‘ Env variables๐Ÿ“ Filesystem accessโš™๏ธ External commands

Run AI Apps with the inference.sh CLI

Using many hosted AI models from a terminal requires different app names, inputs, and task flows. This skill provides focused inference.sh CLI guidance.

Supports: Claude Codex Code(CC)
โš ๏ธ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "infsh-cli" from https://skillstore.io/skills/inferen-sh-infsh-cli.md and its manifest at https://skillstore.io/api/skills/inferen-sh-infsh-cli/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "infsh-cli". Find a fast app for generating a short landscape video.

Expected outcome:

Recommended app: Google Veo Fast. The response summarizes expected inputs, notes account costs, and asks before task submission.

Using "infsh-cli". Track my submitted image generation task.

Expected outcome:

  • Task status: completed.
  • Result type: PNG image.
  • The hosted download location is ready for review.

Using "infsh-cli". Prepare an image upscaling run for a local photo.

Expected outcome:

The response identifies the resolved local path, explains that it will be uploaded, and requests approval before running the app.

Security Audit

Critical
v5 โ€ข 8/6/2026 Open versioned report

The documentation contains repeated remote installer commands that pipe live content to a shell, plus an unsafe manifest-driven download command. It also enables local file uploads and public social media actions without explicit consent controls; most other alerts are Markdown or documentation false positives.

5
Files scanned
608
Lines analyzed
8
Review items
0
False positives ignored

Confirmed security concerns (6)

Critical
Pipe to shell pattern
curl -fsSL https://cli.inference.sh | sh
The command pipes an uninspected network response directly into sh. A compromised server, DNS path, or changed installer can execute arbitrary commands.
Critical
Pipe to shell pattern
curl -fsSL https://cli.inference.sh | sh
The update guidance again executes remote shell content without local inspection or pinning. This is a direct remote code execution supply-chain pattern.
Critical
Pipe to shell pattern
curl -fsSL https://cli.inference.sh | sh
The documented installation command executes a live remote response through sh. There is no opportunity to verify the retrieved script before execution.
Critical
Pipe to shell pattern
curl -fsSL https://cli.inference.sh | sh
The primary setup flow executes downloaded shell text without review, version pinning, or prior signature verification. This can yield arbitrary local code execution.
High
Automatic Local File Upload Can Expose Sensitive Data
The CLI automatically uploads any supplied local path to the hosted service. The skill provides no path allowlist, sensitivity check, or explicit upload confirmation.
Both files explicitly state that local paths are uploaded and show absolute, relative, and home-directory inputs. The missing consent and scope controls are visible in the reviewed guidance.
High
Public Social Media Actions Lack Confirmation Controls
The examples can publish posts and media to Twitter or X, but the skill does not require a preview or user confirmation before consequential account changes.
The cited commands explicitly post text and media to an external account. No confirmation requirement appears around either example.
Capability review items (8)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Ruby/shell backtick execution
> **Install the belt CLI skill:** `npx skills add belt-sh/cli`
Although the backticks are Markdown, the documented npx command installs a separate unpinned community skill. Executing it expands the trust boundary beyond the reviewed files.
Medium
Shell command substitution
> curl -LO $(curl -fsSL https://dist.inference.sh/cli/manifest.json | grep -o '"url":"[^"]*"' | grep
The unquoted substitution derives curl arguments from a remote manifest through fragile text parsing. A changed or compromised manifest can redirect the binary download or inject curl options through word splitting.
Low
Hardcoded URL
curl -fsSL https://cli.inference.sh | sh
The URL supplies a remote installer whose response is executed immediately. HTTPS does not protect against a compromised origin or unsafe installer update.
Low
Hardcoded URL
curl -fsSL https://cli.inference.sh | sh
The reinstall command retrieves executable shell content from the fixed remote endpoint. This creates a genuine network supply-chain dependency.
Low
Hardcoded URL
curl -fsSL https://cli.inference.sh | sh
The hardcoded endpoint is used to fetch an installer that is executed immediately. The network dependency is security relevant even though it is the documented vendor domain.
Low
Hardcoded URL
curl -fsSL https://cli.inference.sh | sh
The URL is an active installer endpoint whose response is piped to a shell. Trust in this endpoint directly controls local code execution.
Low
Hardcoded URL
> curl -LO https://dist.inference.sh/cli/checksums.txt
The command downloads checksums used to trust an executable from the same vendor origin. Origin compromise can therefore replace both the binary and its checksum.
Low
Hardcoded URL
> curl -LO $(curl -fsSL https://dist.inference.sh/cli/manifest.json | grep -o '"url":"[^"]*"' | grep
The remote manifest determines which executable archive curl downloads. The URL is not pinned, and its output is consumed through unquoted command substitution.

Detected Patterns

Pipe to shell patternร—4
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/inferen-sh-infsh-cli/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/inferen-sh-infsh-cli/security.svg)](https://skillstore.io/skills/inferen-sh-infsh-cli?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/inferen-sh-infsh-cli?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/inferen-sh-infsh-cli/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/inferen-sh-infsh-cli.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

inferen-sh. (2026). infsh-cli security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/inferen-sh-infsh-cli/audits/5

BibTeX citation

@techreport{inferen-sh-inferen-sh-infsh-cli-2026, author = {inferen-sh}, title = {infsh-cli security audit report (audit version 5)}, institution = {Skillstore}, year = {2026}, number = {5}, url = {https://skillstore.io/skills/inferen-sh-infsh-cli/audits/5}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "infsh-cli security audit report (audit version 5)" version: "unspecified" type: report authors: - name: "inferen-sh" date-released: "2026-08-06" url: "https://skillstore.io/skills/inferen-sh-infsh-cli/audits/5" identifiers: - type: other value: "skillstore:inferen-sh-infsh-cli:audit:5" description: "Skillstore immutable audit report identifier"

Compare variants

9 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Higher Skillstore usage
inferen-sh Recommended Current

inferen-sh-infsh-cli

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 42
Updated

2026-08-21

qu-skills-infsh-cli

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 20
Updated

2026-08-21

tool-belt-infsh-cli

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 15
Updated

2026-08-21

skillssh-infsh-cli

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 10
Updated

2026-08-21

inference-skills-infsh-cli

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 10
Updated

2026-08-21

inference-sh-skills-infsh-cli

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 10
Updated

2026-08-21

infsh-skills-infsh-cli

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 9
Updated

2026-08-21

101-skills-infsh-cli

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 5
Updated

2026-08-21

halt-catch-fire-infsh-cli

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 3
Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: Medium
45
Architecture
85
Maintainability
87
Content
71
Community
83
Spec Compliance

What You Can Build

Create Media Prototypes

Find and run image or video apps, then monitor long-running generation tasks.

Evaluate Hosted Models

Compare language, search, speech, and media apps through repeatable CLI inputs.

Automate App Operations

Inspect, test, deploy, and invoke inference.sh apps from development or CI workflows.

Try These Prompts

Find an App
Find inference.sh apps for [task]. Show the most relevant choices and explain their main differences before running anything.
Prepare a Safe Run
Inspect [app-name], create a sample input for [goal], and show the planned command. Ask before submitting the task.
Run and Track a Task
Run [app-name] with [input-file] after confirming any local uploads. Return the task identifier, status, and final output location.
Build a Reproducible Workflow
Design a version-pinned inference.sh workflow for [project]. Validate schemas, protect secrets, confirm uploads, monitor tasks, and document failure recovery.

Best Practices

  • Inspect each app schema and generate a sample input before the first run.
  • Pin app versions and preserve task identifiers for reproducible workflows.
  • Confirm costs, local file uploads, credentials, and external account changes before execution.

Avoid

  • Do not pipe remote installer output directly into a shell.
  • Do not place API keys in prompts, command history, source files, or saved examples.
  • Do not publish social content or upload local files without explicit user approval.

Frequently Asked Questions

What must be installed?
The external belt CLI is required. Review and verify its installer before installation.
Does this skill run models locally?
No. It submits work to hosted inference.sh apps, so network access and an account are required.
How are credentials provided?
Use belt login for interactive authentication or the INFSH_API_KEY environment variable for controlled automation.
Can it use local files?
Yes. Paths supplied as compatible inputs are uploaded, so confirm the exact file and destination first.
How are long tasks monitored?
Submit with the no-wait option, preserve the task identifier, and query the task until completion.
Can it post to Twitter or X?
The catalog includes account automation apps. Require a preview and explicit approval before any public or private action.

Developer Details

Author

inferen-sh

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Ref

4121de961d1b6f2ffca856260e239505c302452c

Maintenance freshness

8/7/2026

Usage

37 downloads ยท 235 views

File structure

๐Ÿ“ references/

๐Ÿ“„ app-discovery.md

๐Ÿ“„ authentication.md

๐Ÿ“„ cli-reference.md

๐Ÿ“„ running-apps.md

๐Ÿ“„ SKILL.md

More from inferen-sh

View all
View all