social-to-imgur
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
uvxto executeyt-dlpat runtime.yt-dlpis a well-known, reputable open-source tool used for extracting media metadata. - [COMMAND_EXECUTION]: Uses standard system utilities including
mktemp,curl, andfileto process image data locally. These operations are limited to the scope of the skill's primary functionality. - [DATA_EXFILTRATION]: Retrieves an API Client ID from the macOS keychain via the
securitycommand and sends it to the official Imgur API. This is an intended and documented part of the workflow for authenticating image uploads to the service. - [CREDENTIALS_UNSAFE]: Instructions for storing credentials in the macOS keychain are provided as a secure alternative to hardcoding secrets, which aligns with security best practices.
Audit Metadata