Multimedia Manager

path = request.args.get("path", "")
...
if not any(abs_path.startswith(b) for b in allowed_bases):
    abort(403)
return send_file(abs_path)

The file API accepts a raw path parameter and checks access with a string prefix test, which can allow similarly prefixed paths outside the intended vault directory.

MAX_AGE_HOURS = 24
...
p.add_argument("--hours", type=int, default=MAX_AGE_HOURS, help="Max age in hours (default 24)")
...
p.unlink()

The cleanup script deletes files older than 24 hours, while SKILL.md describes a '--days' flag with a 7-day default; this is a material mismatch for a deletion operation.

pip3 install -q Flask Pillow PyYAML 2>/dev/null || pip install -q Flask Pillow PyYAML

The setup script installs dependencies from PyPI without pinned versions or hashes; this is disclosed and central to setup, but still a supply-chain consideration.

AUTH_TOKEN = os.environ.get("IMAGE_VAULT_TOKEN", "")
...
if not AUTH_TOKEN:
    return

If IMAGE_VAULT_TOKEN is missing, the authentication check returns without enforcing login, even though the skill describes the gallery as token-protected.

gps = None if is_vid else extract_gps_from_exif(filepath)
...
kwargs["latitude"] = lat
kwargs["longitude"] = lng

The importer persists media metadata including EXIF GPS coordinates when present; this is purpose-aligned for a media library but sensitive.