upload-photo

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes a bundled Node.js script (upload.mjs) to process file uploads. The script performs standard file system operations using the built-in node:fs module to read local image data.
  • [EXTERNAL_DOWNLOADS]: The script makes network requests to https://blob.vercel-storage.com. This is the official API endpoint for Vercel Blob storage, a well-known cloud service provider. This communication is required for the skill's primary function.
  • [DATA_EXFILTRATION]: While the skill transmits local file content to an external server, this behavior is the explicitly stated purpose of the utility. The documentation includes clear warnings that the destination store is public and advises against uploading sensitive information. Authentication is handled securely via the BLOB_READ_WRITE_TOKEN environment variable.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 03:33 AM