upload-files
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a local Python script (
resources/upload.py) to handle file uploads. This is used as a workaround for platform tool limitations regarding local file handling. - [CREDENTIALS_SAFE]: The skill follows security best practices by instructing the user to store sensitive API keys in a
.envfile rather than hardcoding them. The Python script correctly retrieves the key from the environment and uses it for Basic Authentication with the official ImageKit API. - [DATA_EXPOSURE]: The script reads local files provided as arguments to upload them to the user's ImageKit account. This is the primary intended function of the skill.
- [EXTERNAL_DOWNLOADS]: The Python script depends on the
requestslibrary. This is a standard, well-known package for HTTP operations in Python.
Audit Metadata