ImageCompress

This skill appears to do what it says (compress images via TinyPNG's web endpoint), but there are important caveats to consider before installing or running it: - Privacy: images are uploaded to tinypng.com/tinify.cn for processing. Do not upload sensitive or personal images. The code warns about this, but it's your responsibility. - Unofficial API & header spoofing: the script uses the web frontend endpoint (not the official API) and deliberately forges headers (random X-Forwarded-For and User-Agent) to simulate browser requests and reduce rate-limiting. That behavior can violate TinyPNG's terms of service, may be considered abusive, and could get your IP blocked. If you plan heavy use, prefer registering for the official API key as the SKILL.md itself recommends. - Data handling: the tool can overwrite originals with --overwrite; warn users and back up important files first. - Operational safety: run the script in a sandboxed environment first to confirm behavior; inspect the code if you have doubts (it is included). Monitor network activity if you are in a sensitive environment. Given these points the skill is coherent with its stated purpose but carries moderate risk due to deliberate rate-limit evasion techniques and use of an unofficial endpoint. If you need high-volume or sensitive processing, use TinyPNG's official API with an API key or a vetted library instead.