2captcha
Pass
Audited by Gen Agent Trust Hub on Jun 5, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill reads the user's 2Captcha API key from standard configuration paths such as
~/.config/2captcha/api-keyor~/.2captcha-api-key. This is a documented behavior for authentication. - [EXTERNAL_DOWNLOADS]: When a remote image URL is provided, the script downloads the content using Python's
urllibmodule to encode it for the solving service. - [DATA_EXFILTRATION]: The script sends CAPTCHA-related data, including base64-encoded images and site identifiers, to the official 2Captcha API at
https://api.2captcha.com. This is the primary intended function and is explicitly disclosed in the privacy documentation.
Audit Metadata