Send Me My Files - R2 upload with short lived signed urls

Security checks across static analysis, malware telemetry, and agentic risk

Overview

No artifact-backed malicious or suspicious behavior could be confirmed from the accessible evidence; the only negative signal available was VirusTotal telemetry, which is not enough by itself.

Treat this as a low-confidence pass because the local artifact inspection could not be completed in the sandbox. Before installing, review the actual SKILL.md and source files for whether uploads are user-directed, path-scoped, size-limited, and clearly tied to the stated R2 upload purpose.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

No VirusTotal findings for this skill version.

Malicious
0
Suspicious
0
Harmless
0
Undetected
66
View on VirusTotal

Risk analysis

No visible risk-analysis findings were reported for this release.