immich-api
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documents common
curlcommands and provides Python scripts that use therequestslibrary to interact with the Immich API. These are standard operations for a REST API bridge and perform tasks such as listing albums, uploading assets, and downloading photos. - [EXTERNAL_DOWNLOADS]: The skill uses the Python
requestslibrary to communicate with a user-specified URL (IMMICH_URL). This is necessary for the intended functionality of managing a self-hosted Immich instance. - [CREDENTIALS_UNSAFE]: The documentation correctly guides users to manage their API keys via environment variables or CLI arguments. It provides placeholders (e.g.,
your-api-key-here) rather than including actual secrets, followign best practices for secret management.
Audit Metadata