Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Background Removal

v0.1.5

Remove backgrounds from images with BiRefNet via inference.sh CLI. Model: BiRefNet (high accuracy background removal). Use for: product photos, portraits, e-...

0· 1.6k·6 current·6 all-time
byÖmer Karışman@okaris
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
The name/description (background removal using BiRefNet) matches the runtime instructions which call the inference.sh CLI and specific image apps; nothing requested in the SKILL.md is unrelated to image background removal.
Instruction Scope
Instructions stay on-task (invoke infsh to run models and edit images). They do require running a remote installer (curl | sh https://cli.inference.sh) and performing 'infsh login' which will communicate with the inference.sh service and may store credentials/tokens; the skill does not instruct reading unrelated files or env vars.
!
Install Mechanism
There is no formal install spec in the registry; the SKILL.md recommends piping a remote install script (cli.inference.sh) into sh and later uses npx to add other skill packages. Downloading and executing an installer from a third‑party domain is higher risk — although the page claims checksum verification, execution of remote scripts and npm package pulls should be validated before running.
Credentials
The skill declares no required env vars, which is consistent with the metadata. However, it calls 'infsh login' (interactive authentication) without declaring credentials; installing/using the CLI will likely create or require account credentials or tokens managed outside the skill metadata.
Persistence & Privilege
The skill does not request always:true or system-wide config changes. It relies on an external CLI that you (or the agent) would install; the skill itself does not request elevated privileges or permanent platform presence.
Assessment
This skill appears to do what it says: it uses inference.sh to remove image backgrounds. Before installing, review the remote installer script (https://cli.inference.sh) yourself and verify checksums from the publisher's checksums.txt rather than piping blindly to sh. Be aware that images you send will be processed by the inference.sh service (privacy/PII risk) and that 'infsh login' will create or store credentials/tokens. If you prefer reduced risk, run the installer in an isolated environment (VM/container) or use a vetted local/background-removal tool instead. If you plan to run the suggested 'npx skills add' commands, remember those will pull additional packages from the npm registry — inspect them if you have security concerns.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dph25z8nb20b1eas9hnc9md81d9gp
1.6kdownloads
0stars
2versions
Updated 10m ago
v0.1.5
MIT-0

Background Removal

Remove backgrounds from images via inference.sh CLI.

Background Removal

Quick Start

curl -fsSL https://cli.inference.sh | sh && infsh login

infsh app run infsh/birefnet --input '{"image_url": "https://your-photo.jpg"}'

Install note: The install script only detects your OS/architecture, downloads the matching binary from dist.inference.sh, and verifies its SHA-256 checksum. No elevated permissions or background processes. Manual install & verification available.

How To

Use Reve for image editing including background changes:

infsh app run falai/reve --input '{
  "prompt": "remove the background, make it transparent",
  "image_url": "https://portrait.jpg"
}'

Or change background directly:

infsh app run falai/reve --input '{
  "prompt": "change the background to a beach",
  "image_url": "https://product-photo.jpg"
}'

Workflow: Generate and Edit

# 1. Generate an image
infsh app run falai/flux-dev-lora --input '{"prompt": "a cute robot mascot"}' > robot.json

# 2. Edit with Reve
infsh app run falai/reve --input '{
  "prompt": "remove background, transparent",
  "image_url": "<url-from-step-1>"
}'

Use Cases

  • E-commerce: Clean product photos
  • Portraits: Professional headshots
  • Marketing: Assets for design
  • Social Media: Profile pictures
  • Design: Elements for compositions

Output

Returns a PNG with transparent background.

Related Skills

# Full platform skill (all 150+ apps)
npx skills add inference-sh/skills@inference-sh

# Image generation
npx skills add inference-sh/skills@ai-image-generation

# FLUX models (including inpainting)
npx skills add inference-sh/skills@flux-image

# Upscaling
npx skills add inference-sh/skills@image-upscaling

Browse all image apps: infsh app list --category image

Documentation

Comments

Loading comments...