Security audit
Security checks for vulnerabilities and agentic risk
This skill is mostly aligned with carousel generation, but its quick-start install path asks users to run a mutable remote shell installer and optional unpinned installs.
Review this skill before installing. Its carousel advice is coherent, but do not run the quick-start installer unless you trust inference.sh and are comfortable executing a remote shell script under your user account. Prefer a manually downloaded, version-pinned, signature- or checksum-verified CLI, and treat the optional related-skill npx commands as separate unreviewed installs.
SKILL.md:14Mutable Remote Installer Executed Directly by the Shell
SKILL.md:209Unpinned Third-Party Skill and Command Runner Installation Instructions
The skill instructs users to pipe a remote script directly into sh, which allows arbitrary code execution from a network-fetched resource at install time. Even with claims about checksum verification, this pattern is dangerous because it bypasses independent review of the fetched script and inherits compromise risk from the hosting endpoint or delivery chain.
curl -fsSL https://cli.inference.sh | sh && infsh login
# Generate a carousel slide
infsh app run infsh/html-to-image --input '{
The manifest presents the skill as content/design guidance, but the body operationalizes remote generation through inference.sh services. This mismatch can mislead operators about the trust boundary and cause unexpected networked execution or data transfer when a user expects only static advice.
The description's trigger list includes terms like "carousel," "slide post," and "educational content," which are broad and not tightly scoped to this specific skill invocation context. Without clearer constraints or negative examples, the skill could be invoked for common social-media or presentation-related requests beyond the intended carousel-design use case.
The skill declares broad Bash execution capability even though its stated purpose is carousel design guidance. Granting shell access expands the attack surface substantially and could enable unintended command execution if the skill is invoked in automation or combined with prompt-manipulated content.
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.