Background Removal

• Analyzed: May 12, 2026, 3:31 AM
• Findings: 1
• Version: 0.1.5
• Hash: 00159c46d512a5eaa4a5ae0a699c7eaa097824e4200208fdcd37ce452985dd2e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to the inclusion of `curl -fsSL https://cli.inference.sh | sh` in the `SKILL.md` file. This command downloads and executes a remote shell script, which is a significant supply chain risk and a direct remote code execution vulnerability. While the stated purpose is to install a legitimate CLI, this method lacks auditability and could lead to arbitrary code execution if the remote script is compromised or malicious. This constitutes a risky capability without clear malicious intent within the provided files.