Agent Tools

• Verdict: Pass
• Confidence: Medium
• Analyzed: Feb 18, 2026, 8:22 AM
• Findings: 0
• Version: 0.1.5

Overview

The skill is an instruction-only wrapper for the inference.sh CLI and its requirements and instructions are consistent with that purpose, but the installation guidance (curl | sh) and remote binary downloads are a moderate operational risk you should review before proceeding.

This skill is documentation for the inference.sh CLI and appears coherent. Main things to consider before installing: (1) avoid blindly running the 'curl https://cli.inference.sh | sh' installer — if you must install, prefer the manual download path and verify SHA-256 checksums and/or cosign signatures as shown; (2) the CLI will store authentication locally and accepts INFSH_API_KEY for automation — treat that key like any sensitive credential and grant least privilege; (3) some hosted apps (e.g., posting to Twitter/X) will require additional third-party credentials/authorization — review what apps you run and their required permissions; (4) verify you trust the inference.sh domain and check upstream project/release pages (signatures, checksums) if you want stronger assurance. If you cannot verify the installer or signatures, consider running the CLI inside an isolated environment (container or VM) instead of your primary workstation.