T03 · Remote Payload Retrieval and Execution
Error
- Location
SKILL.md:16- Finding
Unverified Remote Installer Executed Directly by a Shell
- Content
View full analysis
- Remediation
View remediation
Security audit
Ai Product Photography
Security checks for vulnerabilities and agentic risk
Overview
The skill’s product-image workflow is coherent, but its setup instructions execute a live remote installer and recommend unpinned optional skill installs.
Review this before installing. Prefer a manually downloaded, version-pinned `infsh` release with an independently verified checksum or signature, and avoid the `curl | sh` and unpinned `npx skills add` commands unless you trust those publishers and registries. Use a least-privileged environment and do not log in with production credentials unless you accept the external service’s data handling.
Vulnerability Patterns
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (2)
T08 · Insecure Dependencies
Warning
- Location
SKILL.md:247- Finding
Unpinned Third-Party Package and Skill Installation Commands
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (6)
External Script Fetching
High
- Category
- Supply Chain
- Confidence
- 98% confidence
- Finding
Piping a remotely fetched script directly into
shexecutes network-supplied code immediately, creating a classic arbitrary code execution and supply-chain compromise risk. Even though the document claims checksum verification and benign installer behavior, users cannot safely validate those assurances before execution because the fetched script itself is what gets executed first.- Content
Quick Start
bash curl -fsSL https://cli.inference.sh | sh && infsh login # Generate product shot infsh app run falai/flux-dev --input '{
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 70% confidence
- Finding
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
- Content
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 70% confidence
- Finding
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
- Content
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 70% confidence
- Finding
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
- Content
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 70% confidence
- Finding
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
- Content
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 70% confidence
- Finding
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
- Content
Static analysis
No suspicious patterns detected.