immich-api

Pass

Audited by Gen Agent Trust Hub on Jul 26, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents common curl commands and provides Python scripts that use the requests library to interact with the Immich API. These are standard operations for a REST API bridge and perform tasks such as listing albums, uploading assets, and downloading photos.
  • [EXTERNAL_DOWNLOADS]: The skill uses the Python requests library to communicate with a user-specified URL (IMMICH_URL). This is necessary for the intended functionality of managing a self-hosted Immich instance.
  • [CREDENTIALS_UNSAFE]: The documentation correctly guides users to manage their API keys via environment variables or CLI arguments. It provides placeholders (e.g., your-api-key-here) rather than including actual secrets, followign best practices for secret management.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 26, 2026, 01:15 AM