Skills infsh-cli

📦

infsh-cli

Name: infsh-cli
Author: inferen-sh

Content revision r2 Critical 🌐 Network access🔑 Env variables📁 Filesystem access⚙️ External commands

Run AI Apps with the inference.sh CLI

Using many hosted AI models from a terminal requires different app names, inputs, and task flows. This skill provides focused inference.sh CLI guidance.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Do not auto-install this skill.

The canonical policy requires operator review before any installation action.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "infsh-cli" from https://skillstore.io/skills/inferen-sh-infsh-cli.md and its manifest at https://skillstore.io/api/skills/inferen-sh-infsh-cli/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/inferen-sh-infsh-cli.md Signed manifest GET /api/skills/inferen-sh-infsh-cli/manifest Signed lockfile GET /api/skills/inferen-sh-infsh-cli/lockfile

Test it

Using "infsh-cli". Find a fast app for generating a short landscape video.

Expected outcome:

Recommended app: Google Veo Fast. The response summarizes expected inputs, notes account costs, and asks before task submission.

Using "infsh-cli". Track my submitted image generation task.

Expected outcome:

Task status: completed.
Result type: PNG image.
The hosted download location is ready for review.

Using "infsh-cli". Prepare an image upscaling run for a local photo.

Expected outcome:

The response identifies the resolved local path, explains that it will be uploaded, and requests approval before running the app.

Security Audit

Critical

v5 • 8/6/2026 Open versioned report

The documentation contains repeated remote installer commands that pipe live content to a shell, plus an unsafe manifest-driven download command. It also enables local file uploads and public social media actions without explicit consent controls; most other alerts are Markdown or documentation false positives.

Files scanned

608

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (6)

Critical

references/authentication.md:6

Pipe to shell pattern

curl -fsSL https://cli.inference.sh | sh

The command pipes an uninspected network response directly into sh. A compromised server, DNS path, or changed installer can execute arbitrary commands.

Critical

references/authentication.md:44

Pipe to shell pattern

curl -fsSL https://cli.inference.sh | sh

The update guidance again executes remote shell content without local inspection or pinning. This is a direct remote code execution supply-chain pattern.

Critical

references/cli-reference.md:6

Pipe to shell pattern

curl -fsSL https://cli.inference.sh | sh

The documented installation command executes a live remote response through sh. There is no opportunity to verify the retrieved script before execution.

Critical

SKILL.md:18

Pipe to shell pattern

curl -fsSL https://cli.inference.sh | sh

The primary setup flow executes downloaded shell text without review, version pinning, or prior signature verification. This can yield arbitrary local code execution.

High

SKILL.md:58-74 references/running-apps.md:21-42

Automatic Local File Upload Can Expose Sensitive Data

The CLI automatically uploads any supplied local path to the hosted service. The skill provides no path allowlist, sensitivity check, or explicit upload confirmation.

Both files explicitly state that local paths are uploaded and show absolute, relative, and home-directory inputs. The missing consent and scope controls are visible in the reviewed guidance.

High

SKILL.md:51-52 SKILL.md:72-73

Public Social Media Actions Lack Confirmation Controls

The examples can publish posts and media to Twitter or X, but the skill does not require a preview or user confirmation before consequential account changes.

The cited commands explicitly post text and media to an external account. No confirmation requirement appears around either example.

Capability review items (8)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

SKILL.md:7

Ruby/shell backtick execution

> **Install the belt CLI skill:** `npx skills add belt-sh/cli`

Although the backticks are Markdown, the documented npx command installs a separate unpinned community skill. Executing it expands the trust boundary beyond the reviewed files.

Medium

SKILL.md:28

Shell command substitution

> curl -LO $(curl -fsSL https://dist.inference.sh/cli/manifest.json | grep -o '"url":"[^"]*"' | grep

The unquoted substitution derives curl arguments from a remote manifest through fragile text parsing. A changed or compromised manifest can redirect the binary download or inject curl options through word splitting.

Low

references/authentication.md:6

Hardcoded URL

curl -fsSL https://cli.inference.sh | sh

The URL supplies a remote installer whose response is executed immediately. HTTPS does not protect against a compromised origin or unsafe installer update.

Low

references/authentication.md:44

Hardcoded URL

curl -fsSL https://cli.inference.sh | sh

The reinstall command retrieves executable shell content from the fixed remote endpoint. This creates a genuine network supply-chain dependency.

Low

references/cli-reference.md:6

Hardcoded URL

curl -fsSL https://cli.inference.sh | sh

The hardcoded endpoint is used to fetch an installer that is executed immediately. The network dependency is security relevant even though it is the documented vendor domain.

Low

SKILL.md:18

Hardcoded URL

curl -fsSL https://cli.inference.sh | sh

The URL is an active installer endpoint whose response is piped to a shell. Trust in this endpoint directly controls local code execution.

Low

SKILL.md:27

Hardcoded URL

> curl -LO https://dist.inference.sh/cli/checksums.txt

The command downloads checksums used to trust an executable from the same vendor origin. Origin compromise can therefore replace both the binary and its checksum.

Low

SKILL.md:28

Hardcoded URL

> curl -LO $(curl -fsSL https://dist.inference.sh/cli/manifest.json | grep -o '"url":"[^"]*"' | grep

The remote manifest determines which executable archive curl downloads. The URL is not pinned, and its output is consumed through unquoted command substitution.

Risk Factors

🌐 Network access (17)

references/authentication.md:6 references/authentication.md:44 references/cli-reference.md:6 references/running-apps.md:152 SKILL.md:9 SKILL.md:13 SKILL.md:18 SKILL.md:22 SKILL.md:27 SKILL.md:28 SKILL.md:141 SKILL.md:142 SKILL.md:143 SKILL.md:144 SKILL.md:145 SKILL.md:146 SKILL.md:147

🔑 Env variables (3)

references/authentication.md:30 references/authentication.md:53 references/cli-reference.md:79

📁 Filesystem access (5)

references/cli-reference.md:91 references/cli-reference.md:91 references/running-apps.md:41 SKILL.md:33 SKILL.md:33

⚙️ External commands (22)

Detected Patterns

Pipe to shell pattern×4

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/inferen-sh-infsh-cli/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/inferen-sh-infsh-cli/security.svg)](https://skillstore.io/skills/inferen-sh-infsh-cli?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/inferen-sh-infsh-cli?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/inferen-sh-infsh-cli/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/inferen-sh-infsh-cli.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

inferen-sh. (2026). infsh-cli security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/inferen-sh-infsh-cli/audits/5

BibTeX citation

@techreport{inferen-sh-inferen-sh-infsh-cli-2026,
  author = {inferen-sh},
  title = {infsh-cli security audit report (audit version 5)},
  institution = {Skillstore},
  year = {2026},
  number = {5},
  url = {https://skillstore.io/skills/inferen-sh-infsh-cli/audits/5},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "infsh-cli security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
  - name: "inferen-sh"
date-released: "2026-08-06"
url: "https://skillstore.io/skills/inferen-sh-infsh-cli/audits/5"
identifiers:
  - type: other
    value: "skillstore:inferen-sh-infsh-cli:audit:5"
    description: "Skillstore immutable audit report identifier"

Compare variants

9 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Higher Skillstore usage

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

inferen-sh Recommended Current

inferen-sh-infsh-cli

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 41

Updated

2026-08-21

qu-skills

qu-skills-infsh-cli

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 19

Updated

2026-08-21

tool-belt

tool-belt-infsh-cli

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 13

Updated

2026-08-21

skillssh

skillssh-infsh-cli

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 9

Updated

2026-08-21

inference-skills

inference-skills-infsh-cli

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 9

Updated

2026-08-21

inference-sh-skills

inference-sh-skills-infsh-cli

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 8

Updated

2026-08-21

infsh-skills

infsh-skills-infsh-cli

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 7

Updated

2026-08-21

101-skills

101-skills-infsh-cli

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 5

Updated

2026-08-21

halt-catch-fire

halt-catch-fire-infsh-cli

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 3

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Create Media Prototypes

Find and run image or video apps, then monitor long-running generation tasks.

Evaluate Hosted Models

Compare language, search, speech, and media apps through repeatable CLI inputs.

Automate App Operations

Inspect, test, deploy, and invoke inference.sh apps from development or CI workflows.

Try These Prompts

Find an App

Find inference.sh apps for [task]. Show the most relevant choices and explain their main differences before running anything.

Prepare a Safe Run

Inspect [app-name], create a sample input for [goal], and show the planned command. Ask before submitting the task.

Run and Track a Task

Run [app-name] with [input-file] after confirming any local uploads. Return the task identifier, status, and final output location.

Build a Reproducible Workflow

Design a version-pinned inference.sh workflow for [project]. Validate schemas, protect secrets, confirm uploads, monitor tasks, and document failure recovery.

Best Practices

Inspect each app schema and generate a sample input before the first run.
Pin app versions and preserve task identifiers for reproducible workflows.
Confirm costs, local file uploads, credentials, and external account changes before execution.

Avoid

Do not pipe remote installer output directly into a shell.
Do not place API keys in prompts, command history, source files, or saved examples.
Do not publish social content or upload local files without explicit user approval.