Caveat verdict
ai-content-pipeline
This skill builds multi-step content creation pipelines via the inference.sh CLI, combining image, video, audio, and text generation tools — all operations are transparent automation using documented services.
⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis — not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Permission integrity
network_out
Findings (3)
Pipe-to-shell pattern (curl | sh) — supply chain attack vector
SKILL.md · code · curl -fsSL https://cli.inference.sh | sh
Pipe to sh — executes piped content as shell commands
SKILL.md · code · | sh
<script> tag in markdown — potential code injection
SKILL.md · code · <script>
Why the tier is capped
Execution sink present in raw bytes (Hard Floor: class A/B). Final tier capped at Caution — cannot be lifted by any downgrade, example-payload opt-in, or allowlist.
Permissions & capabilities
No declared permissions — minimal attack surface.
network_out Is this flag fair?
Thanks — recorded.