Web Search

• Analyzed: May 14, 2026, 3:31 AM
• Findings: 1
• Version: 0.1.5
• Hash: 2cf61355fffa49e504a571f5a09962a379b76826c7033ab0c892fa7761c9594d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill employs a risky `curl | sh` installation pattern for the `infsh` CLI and requests broad execution permissions (`Bash(infsh *)`) in `SKILL.md`. While these capabilities are aligned with the stated purpose of providing web search via the inference.sh platform, the execution of unverified remote scripts from `cli.inference.sh` and the reliance on external binaries represent a significant security risk. Additionally, the `_meta.json` file contains a future-dated timestamp (2026), which is an unusual indicator for current software.