ClawHub

Video Ad Specs

Security checks across malware telemetry and agentic risk

Overview

This skill is a coherent video-ad helper, with the main caution being a user-facing external CLI installer and provider workflow.

Safe to install for video ad specs and inference.sh-based generation. Before running the installer, verify the CLI source and checksum or use the manual install path. Treat prompts and media as data sent to an external provider, and use an account with appropriate billing limits.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

External Script Fetching

High
Category
Supply Chain
Content
## Quick Start

```bash
curl -fsSL https://cli.inference.sh | sh && infsh login

# Generate a vertical video ad scene
infsh app run bytedance/seedance-1-5-pro --input '{
Confidence
98% confidence
Finding
curl -fsSL https://cli.inference.sh | sh

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal