DiT360 Panorama Generator

• Risk level: Low
• Analyzed: Apr 18, 2026, 8:11 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's code and instructions are consistent with its stated purpose (calling the DiT360 Hugging Face Space, converting the image, and serving a local viewer); nothing in the package demands unrelated credentials or system-wide access, but there are a few modest operational risks to be aware of.

This package appears to do what it says: call the DiT360 Hugging Face Space, save an image, convert it to JPG, and create a local Pannellum viewer. Before running: 1) Inspect the two scripts yourself (they are small and included). 2) Be cautious about running the suggested installer command (curl ... | sh) — prefer to install 'uv' from a trusted source or use pip directly. 3) Note the image conversion uses macOS 'sips' (will fail on Linux/Windows); review/replace that line if needed. 4) The tool contacts external services (Hugging Face Space and jsdelivr CDN); only use it if you trust those endpoints. 5) If you want extra safety, run the scripts in a disposable VM or container and avoid running the remote installer piped to sh.