Security audit
Security checks across malware telemetry and agentic risk
This image comparison skill does what it says overall, but it needs Review because it can automatically use local secret-manager credentials and save generated images into a cloud-synced Proton Drive folder without clear user opt-in.
Review before installing. Use only non-sensitive prompts unless you accept third-party processing and local history storage. Check whether the Proton Drive path exists on your machine, because generated images may sync to cloud storage. Prefer setting OPENAI_API_KEY explicitly and avoid relying on automatic 1Password service-token lookup unless you understand what vault item it can access.
filename = f"dalle3_{quality}_{ts}.png"
dest = OUTPUT_DIR / filename
img_resp = requests.get(image_url, timeout=30)
dest.write_bytes(img_resp.content)
result = {66/66 vendors flagged this skill as clean.
No suspicious patterns detected.