OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Aug 17, 2026
Independent checks from skills.sh's audit partners.
The skill provides access to AI models through the inference.sh CLI. It uses an insecure installation method (curl piped to shell) and includes an automatic file upload feature that presents a data exfiltration risk if the agent is manipulated into uploading sensitive local files.
Detected behaviors
1 alert: gptAnomaly
2 issues
3/5 files flagged
1 finding · Score: 82/100