github-image-upload

Warn

Audited by Snyk on Jun 30, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.90). The skill can run "gh extension install drogers0/gh-image", which fetches and installs/executes code from the GitHub repository https://github.com/drogers0/gh-image at runtime and the extension is a required dependency for uploads.

Issues (1)

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 30, 2026, 09:43 AM
Issues
1
Security Audit — snyk — github-image-upload