Product Photography

• Analyzed: May 14, 2026, 3:41 AM
• Findings: 1
• Version: 0.1.5
• Hash: 6180cf265737ec390eb811c82b3e41b26634073b6a1c913948c9ca19265bb40e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides comprehensive instructions and prompt templates for professional product photography using the inference.sh CLI. While the documentation includes a 'curl | sh' installation pattern (SKILL.md), which is a common but high-risk practice for remote script execution, the skill's 'allowed-tools' metadata explicitly restricts the agent to the 'infsh' command. This restriction effectively prevents the agent from executing the curl command or any other unauthorized shell scripts. The content is entirely focused on its stated purpose, lacks any indicators of data exfiltration or malicious intent, and demonstrates good security hygiene by limiting the agent's command scope.