×
Third-party audit

Gen Agent Trust Hub

infsh-cli · its-a-skill-issue/superpowers

High risk
Provider summary

This skill enables interaction with the inference.sh cloud platform via its CLI tool. The main security risks involve a high-risk installation method (piping remote scripts to the shell) and a data exfiltration vector through an automatic file upload feature that could be exploited to harvest sensitive user credentials or configuration files.

The provider classified the analyzed snapshot as HIGH risk. This result applies to the content available at audit time.

Provider
Gen Agent Trust Hub
Normalized result
fail
Risk level
HIGH
Audited
Sep 07, 2026
Interpretation

How to use this signal

01

Confirm the source

Compare the repository, publisher, and installation command before continuing.

02

Read the content

Review SKILL.md, scripts, and allowed tools. OpenAI Suite never executes them during indexing.

03

Limit permissions

Use the narrowest possible scope and avoid broad credentials for third-party skills.