shortaaa

Generate images with FLUX models (Black Forest Labs) via inference.sh CLI. Models: FLUX Dev LoRA, FLUX.2 Klein LoRA with custom style adaptation. Capabilitie...

This SKILL.md appears to do what it says (use inference.sh CLI to run FLUX models), but it tells you to run a remote installer via `curl ... | sh` from cli.inference.sh — a high-risk pattern because it executes code fetched from the network. Before installing, consider: (1) review the installer script contents instead of piping to sh; (2) verify the SHA-256 checksums manually using the provided checksums link; (3) prefer installing from a trusted package manager or an audited binary; (4) confirm the reputation of inference.sh and dist.inference.sh and ask the publisher for a homepage or source repository; (5) run the installer in a non-privileged or disposable environment if you proceed. The skill registry metadata lacks a homepage/source and the registry name mismatch is a minor red flag—if you need higher assurance, request the CLI's source or a signed release before proceeding.

Type: OpenClaw Skill Name: short Version: 1.0.0 The skill bundle instructs the AI agent to perform a 'curl | sh' operation from 'https://cli.inference.sh' to install its dependencies. This pattern is a high-risk behavior that allows for arbitrary remote code execution (RCE) and bypasses standard security verification, even though it is presented as a standard installation step. While there is no explicit evidence of malicious intent or data exfiltration, the reliance on unverified remote scripts for environment setup is a significant security concern in an automated agent context.