Ai Image Generation
PassAudited by ClawScan on May 1, 2026.
Overview
The skill is coherent for AI image generation, but users should notice that it relies on installing and logging into the external inference.sh CLI.
This skill appears purpose-aligned for AI image generation. Before installing, make sure you trust inference.sh, consider verifying the CLI installer/checksum, and be aware that prompts, image URLs, and generation requests may be sent to the external service under your logged-in account.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the CLI gives code from inference.sh a chance to run locally during setup.
The skill instructs users to install an external CLI by piping a remote script into the shell. This is a disclosed setup step for the skill, but it depends on trusting the remote installer.
curl -fsSL https://cli.inference.sh | sh && infsh login
Use the linked manual install and checksum verification if possible, and only run the installer if you trust the inference.sh source.
The agent may be able to run broader inference.sh CLI actions available to the logged-in account, though the documented examples are image-focused.
The skill permits Bash execution of any infsh command, not only the specific image-generation commands shown in the examples.
allowed-tools: Bash(infsh *)
Review requested infsh commands before approving meaningful actions, especially if they could consume credits, modify account resources, or run non-image apps.
Generated image requests may run under the user's inference.sh account and may be subject to that account's permissions, quotas, or billing.
The skill requires logging into the inference.sh CLI for normal use, even though registry metadata does not declare a primary credential.
infsh login
Log in only with the intended account and understand any costs or account permissions before using the skill.