Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Image Upscaling

Upscale and enhance images with Real-ESRGAN, Thera, Topaz, FLUX Upscaler via inference.sh CLI. Models: Real-ESRGAN, Thera (any size), FLUX Dev Upscaler, Topa...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 1.2k · 5 current installs · 5 all-time installs
byÖmer Karışman@okaris
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (image upscaling with Real-ESRGAN, Topaz, FLUX, Thera) matches the SKILL.md instructions which call out infsh app run commands to run those upscalers. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
Instructions are narrowly scoped to installing the inference.sh CLI and invoking infsh app run with image_url inputs. They do not instruct reading local system files or unrelated environment variables. However, they do instruct running 'infsh login' (implying credential entry) and encourage installing additional skill packages via npx, which expands scope beyond this single skill.
!
Install Mechanism
The SKILL.md directs users to run a remote install stream (curl -fsSL https://cli.inference.sh | sh) and to download platform binaries from dist.inference.sh. Although the doc claims SHA-256 checksums are available, piping a remote script to sh and fetching binaries from an external host is higher-risk than an instruction-only skill with no external execution. No homepage or authoritative repository is provided to verify provenance.
Credentials
The skill declares no required environment variables or credentials, which is reasonable. But it prompts 'infsh login' (implicit credential use) without declaring what credentials are needed or how they're stored. Users should assume account/API credentials may be required by the external service.
Persistence & Privilege
No 'always: true' privilege is requested; the skill is user-invocable only. There is no install spec embedded in the skill bundle that would grant persistent agent-level privileges. The agent could invoke the external CLI if the user installs it, but the skill itself does not request persistent system access.
What to consider before installing
This skill appears to do what it says: use the inference.sh CLI to upscale images. The main red flag is the installer guidance: it tells you to run a remote install script (curl | sh) and download binaries from dist.inference.sh without a cited, auditable project homepage or repository. If you consider installing: (1) inspect the install script before running it (do not pipe blindly); (2) verify the SHA-256 checksums from the stated checksum URL over HTTPS and confirm integrity; (3) prefer manual download and inspection of the CLI binary or source if available; (4) be aware that 'infsh login' will likely collect credentials — confirm how those are stored and what permissions they grant; (5) avoid supplying sensitive or private images to an unfamiliar third-party service until you’ve validated its privacy policy and provenance. If you cannot verify the source or checksums, treat the installer as untrusted and decline to install.

Like a lobster shell, security has layers — review code before you run it.

Current versionv0.1.5
Download zip
latestvk973d9j2s1k3rwbjmcshjxxb3s81dt6a

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Image Upscaling

Upscale and enhance images via inference.sh CLI.

Image Upscaling

Quick Start

curl -fsSL https://cli.inference.sh | sh && infsh login

infsh app run infsh/real-esrgan --input '{"image_url": "https://your-image.jpg"}'

Install note: The install script only detects your OS/architecture, downloads the matching binary from dist.inference.sh, and verifies its SHA-256 checksum. No elevated permissions or background processes. Manual install & verification available.

Available Upscalers

ModelApp IDBest For
Topaz Image Upscalerfalai/topaz-image-upscalerProfessional quality, any image

Examples

Upscale Any Image

infsh app run falai/topaz-image-upscaler --input '{"image_url": "https://low-res-image.jpg"}'

Workflow: Generate and Upscale

# 1. Generate image with FLUX Klein (fast)
infsh app run falai/flux-2-klein-lora --input '{"prompt": "landscape painting"}' > image.json

# 2. Upscale the result
infsh app run falai/topaz-image-upscaler --input '{"image_url": "<url-from-step-1>"}'

Use Cases

  • AI Art: Upscale generated images for print
  • Old Photos: Restore and enhance resolution
  • Web Images: Prepare for high-DPI displays
  • Print: Increase resolution for large prints
  • Thumbnails: Create high-res versions

Related Skills

# Full platform skill (all 150+ apps)
npx skills add inference-sh/skills@inference-sh

# Image generation (generate then upscale)
npx skills add inference-sh/skills@ai-image-generation

# FLUX models
npx skills add inference-sh/skills@flux-image

# Background removal
npx skills add inference-sh/skills@background-removal

Browse all image apps: infsh app list --category image

Documentation

Files

1 total
Select a file
Select a file to preview.

Comments

Loading comments…