The Agent Skills Directory

[DATA_EXPOSURE]: The skill facilitates the upload of local files to Vercel Blob, a well-known cloud storage service. It includes explicit warnings that the storage is public and should not be used for sensitive data.- [COMMAND_EXECUTION]: Executes a local Node.js script (upload.mjs) to handle file reading and network transmission. The script uses standard built-in modules and manages file paths using basename to prevent path traversal.- [CREDENTIALS_UNSAFE]: Secret tokens are managed through the BLOB_READ_WRITE_TOKEN environment variable. The skill correctly instructs the user on how to securely populate this variable using a secret management tool rather than hardcoding credentials.- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied file paths for upload. While there is a potential risk that an agent could be directed to upload sensitive system files, this is a standard risk for file-handling tools and is addressed by the skill's clear documentation and intended usage for public image hosting.

upload-photo