social-to-imgur

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses uvx to execute yt-dlp at runtime. yt-dlp is a well-known, reputable open-source tool used for extracting media metadata.
  • [COMMAND_EXECUTION]: Uses standard system utilities including mktemp, curl, and file to process image data locally. These operations are limited to the scope of the skill's primary functionality.
  • [DATA_EXFILTRATION]: Retrieves an API Client ID from the macOS keychain via the security command and sends it to the official Imgur API. This is an intended and documented part of the workflow for authenticating image uploads to the service.
  • [CREDENTIALS_UNSAFE]: Instructions for storing credentials in the macOS keychain are provided as a secure alternative to hardcoding secrets, which aligns with security best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 06:07 PM
Security Audit — agent-trust-hub — social-to-imgur