Product Photography

PassAudited by ClawScan on May 10, 2026.

Overview

This instruction-only product photography skill appears purpose-aligned, but it relies on installing and logging into an external inference.sh CLI.

This looks safe to use as a product-photography prompt guide if you trust inference.sh. Before installing, review the CLI installer or use checksum-verified manual installation, understand that login may use your provider account, and avoid sending confidential product details in prompts unless you are comfortable with the provider.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the CLI executes code from inference.sh on the user's machine.

Why it was flagged

The documented setup pipes a remote installer into the shell before using the skill's CLI. This is user-directed and purpose-aligned, but it requires trusting the external install source.

Skill content
curl -fsSL https://cli.inference.sh | sh && infsh login
Recommendation

Use the manual install/checksum option if possible, review the installer source, and install only if you trust inference.sh.

What this means

The CLI may use the user's inference.sh account and could consume account quota or billing depending on the service terms.

Why it was flagged

The skill requires logging into the external inference.sh service. That account access is expected for the integration, and the artifact does not show credential logging, hardcoding, or unrelated use.

Skill content
infsh login
Recommendation

Use an account or token appropriate for image generation, monitor usage, and revoke or log out if you stop using the skill.

What this means

Product descriptions, brand concepts, or other prompt details may be sent to an external AI service.

Why it was flagged

The examples send product-photography prompts to external model/provider endpoints through the inference.sh CLI. This is central to the skill's purpose, but it creates an external data flow.

Skill content
infsh app run bytedance/seedream-4-5 --input '{
  "prompt": "professional product photography, single premium wireless headphone on clean white background
Recommendation

Avoid including confidential product plans, unreleased designs, or sensitive customer information in prompts unless the provider's terms and privacy posture are acceptable.