gallery-dl

• Verdict: Pass
• Confidence: High
• Analyzed: Mar 4, 2026, 2:06 PM
• Findings: 0
• Version: 1.1.1

Overview

The skill's files and instructions are coherent with its stated purpose (wrapping the gallery-dl tool); it does not request unexplained credentials or do unexpected network calls, though it recommends installing a PyPI package and using credential mechanisms that have normal security caveats.

This skill appears to be a straightforward wrapper for the well-known gallery-dl tool and is coherent with its description. Before installing or using it: (1) prefer installing gallery-dl in a virtualenv and pin a specific, audited version rather than running an unpinned 'pip install', (2) avoid passing sensitive passwords on the command line (--password) where they can appear in process lists or shell history, and prefer temporary tokens or secure credential storage, (3) be cautious about storing plaintext credentials in ~/.netrc or ~/.config/gallery-dl/config.json, (4) confirm the upstream project (SKILL.md links to the gallery-dl GitHub) matches the code you expect, and (5) respect the terms of service and copyright rules of sites you download from.