Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward image-processing helper that uses standard local image tools, with some disclosed operational cautions around automatic compression and in-place file changes.
Install this if you want an agent to use local image tooling for resizing, conversion, metadata inspection, and compression. Be aware that some examples modify image files in place, and the fail-open rule means an original image may be sent unchanged if compression tooling is missing or errors.
The skill advertises very broad activation criteria such as using it whenever an image is sent, produced, or attached. In an agent setting, this can cause over-invocation of shell-capable tooling on routine tasks, increasing attack surface and the chance that untrusted image inputs trigger risky processing paths or unnecessary local file handling.
The 'When to apply' section effectively mandates near-universal preprocessing before any image delivery. This default behavior is dangerous in agent environments because it normalizes automatic execution of external binaries and fail-open pass-through logic, which can bypass safer task-specific decision-making and lead to unnecessary handling of potentially adversarial files.
The instruction to 'fail open' is risky in an image-processing skill because it explicitly prefers silently passing the original file through unchanged when a tool is missing or a step fails. That can bypass expected transformations such as compression, metadata stripping, or orientation cleanup, causing privacy and policy controls to fail without notice.
Skill allows unbounded resource consumption (API calls, storage, compute). Without rate limits or quotas, a compromised or misbehaving agent can cause denial-of-service or cost overruns.
# 50 = delay between frames in 1/100s (so 0.5s per frame); loop forever by default
magick -delay 50 frame1.png frame2.png frame3.png anim.gif
The manifest description presents the skill as handling delivery-time compression with ImageMagick and oxipng, but the skill documentation expands actual supported operations to include JPEG and WebP compression via additional external tools. This is a scope/behavior mismatch because those capabilities are described as part of the skill's processing flow even though the manifest's declared required binaries only list magick and oxipng.
This markdown file includes a command that rewrites every PNG in the current directory in place via oxipng, which can affect user data. While the command is technically clear, the surrounding text does not explicitly warn that originals will be modified rather than copied, so a user could run it without noticing the destructive aspect.
No suspicious patterns detected.