upload-photo
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a bundled Node.js script (
upload.mjs) to process file uploads. The script performs standard file system operations using the built-innode:fsmodule to read local image data. - [EXTERNAL_DOWNLOADS]: The script makes network requests to
https://blob.vercel-storage.com. This is the official API endpoint for Vercel Blob storage, a well-known cloud service provider. This communication is required for the skill's primary function. - [DATA_EXFILTRATION]: While the skill transmits local file content to an external server, this behavior is the explicitly stated purpose of the utility. The documentation includes clear warnings that the destination store is public and advises against uploading sensitive information. Authentication is handled securely via the
BLOB_READ_WRITE_TOKENenvironment variable.
Audit Metadata