Screenshot Stitcher

• Risk level: Low
• Analyzed: Apr 24, 2026, 3:50 AM
• Findings: 0
• Version: 0.1.1

Overview

The skill's requirements and instructions are consistent with a local CLI tool for stitching iPhone screenshots; it asks for no credentials and has no surprising install steps, but installing a third‑party PyPI package or running an unchecked repo entrypoint has the normal risks of executing remote code.

This skill appears coherent and minimal: it expects you to install and run a local PyPI CLI to stitch screenshots and does not request credentials. Before installing or running it, consider: 1) only install the package in a controlled Python environment (virtualenv) and verify the package/source if you don't trust it; 2) avoid running 'python3 main.py' from an untrusted checkout (that runs arbitrary code); 3) if you need stronger guarantees, review the package source on PyPI/GitHub or prefer an offline/air-gapped process. If you plan to let an autonomous agent run these commands, be aware that installing a package or executing a local script gives that agent the ability to run code on your machine.