shortaaa

Generate images with FLUX models (Black Forest Labs) via inference.sh CLI. Models: FLUX Dev LoRA, FLUX.2 Klein LoRA with custom style adaptation. Capabilitie...

Security Scan

The skill's instructions match its stated purpose (running the inference.sh CLI to generate images), but it directs users to download and execute a remote install script (curl | sh) from a third-party domain with no source/homepage metadata—this is risky and not fully justified in-context.

Purpose & Capability

The SKILL.md describes using the inference.sh CLI to run FLUX models and the examples align with that purpose. Minor inconsistency: registry name 'shortaaa' vs SKILL.md internal name 'short' and no homepage/source provided; otherwise required capabilities (none) are proportionate to the declared functionality.

Instruction Scope

Runtime instructions tell the user to run `curl -fsSL https://cli.inference.sh | sh` and then `infsh login` and `infsh app run ...`. This directs the agent/user to download and execute a remote installer and to perform an interactive login — both of which grant the CLI broad capabilities and require trusting the external host. The SKILL.md does not instruct reading unrelated system files or env vars, but it does give the agent permission to perform a network install and run arbitrary code from the remote script.

Install Mechanism

There is no formal install spec in the registry; instead the instructions recommend piping a remote installer to sh. The domains used are `cli.inference.sh` and `dist.inference.sh` (not a known OS package manager). While the doc claims SHA-256 checksum verification is available, piping an installer to sh is a high-risk pattern because it executes remote code before you can inspect it. No archive-extract details are provided, but the mechanism still results in arbitrary code being written/executed.

Credentials

The skill declares no required environment variables or credentials. That is consistent with an instruction-only skill that relies on an external CLI which will handle authentication (the doc suggests `infsh login`). Note: the skill will indirectly require you to provide credentials to the external service at login time, but those credentials are not requested by the skill itself.

Persistence & Privilege

The skill does not request always:true, does not include install-time code in the registry, and does not declare config-path changes. The main persistence risk comes from the external CLI installer which may install binaries or services on the host, but that behavior is external to the skill bundle.

What to consider before installing

This SKILL.md appears to do what it says (use inference.sh CLI to run FLUX models), but it tells you to run a remote installer via `curl ... | sh` from cli.inference.sh — a high-risk pattern because it executes code fetched from the network. Before installing, consider: (1) review the installer script contents instead of piping to sh; (2) verify the SHA-256 checksums manually using the provided checksums link; (3) prefer installing from a trusted package manager or an audited binary; (4) confirm the reputation of inference.sh and dist.inference.sh and ask the publisher for a homepage or source repository; (5) run the installer in a non-privileged or disposable environment if you proceed. The skill registry metadata lacks a homepage/source and the registry name mismatch is a minor red flag—if you need higher assurance, request the CLI's source or a signed release before proceeding.

FLUX Image Generation

Generate images with FLUX models via inference.sh CLI.

Quick Start

curl -fsSL https://cli.inference.sh | sh && infsh login

infsh app run falai/flux-dev-lora --input '{"prompt": "a futuristic city at night"}'

Install note: The install script only detects your OS/architecture, downloads the matching binary from dist.inference.sh, and verifies its SHA-256 checksum. No elevated permissions or background processes. Manual install & verification available.

FLUX Models

Model	App ID	Speed	Quality	Use Case
FLUX Dev LoRA	falai/flux-dev-lora	Medium	Highest	Production, custom styles
FLUX.2 Klein LoRA	falai/flux-2-klein-lora	Fastest	Good	Fast iteration, 4B/9B sizes

Examples

High-Quality Generation

infsh app run falai/flux-dev-lora --input '{
  "prompt": "professional product photo of headphones, studio lighting, white background"
}'

Fast Generation (Klein)

infsh app run falai/flux-2-klein-lora --input '{"prompt": "abstract art, colorful"}'

With LoRA Custom Styles

infsh app sample falai/flux-dev-lora --save input.json

# Edit to add lora_url for custom style
infsh app run falai/flux-dev-lora --input input.json

Image-to-Image

infsh app run falai/flux-dev-lora --input '{
  "prompt": "transform to watercolor style",
  "image_url": "https://your-image.jpg"
}'

For Other Image Tasks

# Image editing with natural language
infsh app run falai/reve --input '{"prompt": "change background to beach"}'

# Upscaling
infsh app run falai/topaz-image-upscaler --input '{"image_url": "https://..."}'

Related Skills

# Full platform skill (all 150+ apps)
npx skills add inference-sh/skills@inference-sh

# All image generation models
npx skills add inference-sh/skills@ai-image-generation

# Upscaling
npx skills add inference-sh/skills@image-upscaling

Browse all apps: infsh app list

Documentation

• Running Apps - How to run apps via CLI
• Image Generation Example - Complete image generation guide
• Streaming Results - Real-time progress updates