Security audit
Security checks for vulnerabilities and agentic risk
The skill is mostly a normal character-image workflow, but its quick start asks users to run a mutable remote shell installer and then log in, which needs review before use.
Review the installer source and prefer a pinned, separately verified manual install before using this skill. Do not run the quick-start `curl | sh` command or chained login in an environment with sensitive files or credentials unless you trust the inference.sh distribution path and understand where the CLI stores tokens. Treat the related `npx skills add` commands as optional and avoid them unless pinned or verified.
SKILL.md:14Unverified Remote Installer Piped Directly into a Shell
SKILL.md:271Unpinned Third-Party Skill Installation Commands
The skill instructs users to execute a remote script directly with curl ... | sh, which gives the remote server immediate code execution on the user's machine. Even with a reassuring note about checksum verification, the dangerous pattern remains because users are told to trust and run network-fetched shell code without independently inspecting it first.
curl -fsSL https://cli.inference.sh | sh && infsh login
# Generate a character concept
infsh app run falai/flux-dev-lora --input '{
The description includes many generic trigger phrases such as "character design," "character art," and "character creation," which can overlap with ordinary creative requests and adjacent art tasks. The file does not provide negative examples or context constraints to clarify when this skill should activate versus when a different image or design skill should be used.
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
The manifest describes a skill for character consistency techniques, reference sheets, and LoRA usage, but the document also instructs the user to fetch and execute a remote install script and perform CLI login. While using a CLI is related to image generation, installation/authentication guidance is an operational capability not explicitly justified by the narrowly framed design-sheet purpose.
No suspicious patterns detected.