ImgBB API
v1.1.2Upload images to ImgBB via local file, URL, or base64 and get shareable direct links, supporting batch uploads and optional expiration settings.
⭐ 0· 272·1 current·1 all-time
by@kexu9
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name, description, SKILL.md, and scripts/imgbb.py all consistently implement an ImgBB uploader. The only mismatch is registry metadata (which lists no required env vars or binaries) vs SKILL.md and the script that expect python3, the requests library, and an IMGBB_API_KEY — the code legitimately needs those.
Instruction Scope
Runtime instructions and the script stay within the stated purpose: they read an API key (env or ~/.imgbb_api_key), accept a local file/URL/base64, and POST to https://api.imgbb.com/1/upload. There are no instructions to collect unrelated files, scan the system, or exfiltrate data to unexpected endpoints.
Install Mechanism
This is an instruction-only skill with an included Python script (no installer). SKILL.md indicates python3 and the requests pip package are required — reasonable for this task. There is no external download URL or archive extraction; risk from install mechanism is low.
Credentials
The only secret the skill uses is an ImgBB API key provided via IMGBB_API_KEY, --key, or a local config file (~/.imgbb_api_key). That is proportionate to an image-uploading tool. The minor issue: registry metadata does not declare IMGBB_API_KEY while SKILL.md and code do, which is an inconsistency callers should be aware of.
Persistence & Privilege
The skill does not request persistent platform privileges. It can optionally write a small config file to the user's home (~/.imgbb_api_key) when --set-key is used — this is limited in scope and expected for convenience. always is false and the skill does not modify other skills or system-wide settings.
Assessment
This skill appears to do exactly what it says: upload images to ImgBB. Before installing, be aware that it expects an ImgBB API key (IMGBB_API_KEY or supplied via --key) and can save that key to ~/.imgbb_api_key if you use --set-key. The registry metadata omits the declared env requirement (IMGBB_API_KEY) — check that you provide the key securely and only give the key needed for ImgBB. If you prefer not to store the key on disk, pass it per-run with --key or via an environment variable.Like a lobster shell, security has layers — review code before you run it.
latestvk978zt496wmq2t156vjpdhbj6h8299jf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.