MaybeAI Upload Audit

This skill implements exactly what it claims, but review these points before installing or running it: - Dependencies: The code uses the Python 'requests' package and expects the 'cloudflared' binary; the registry metadata does not declare or install these. Install Python dependencies (pip install requests) and ensure cloudflared is installed and trusted. - Credentials: You must supply a MaybeAI bearer token and user-id. Only provide tokens you control and rotate/revoke them if exposed during testing. - Public sharing: The share feature starts a local HTTP server and opens a public trycloudflare tunnel—be careful about the path you share. Do not point it at directories containing secrets or other users' data. - Run in isolation: Test first in a disposable/isolated environment (throwaway token, temp directory) to verify behavior. - Audit the code: If you will supply real credentials or production files, review the scripts (upload flow, URL parsing, and tunnel handling) to ensure they meet your security requirements and consider adding explicit checks (allowed paths, confirmation prompts) before sharing. If you need this skill but want lower risk, ask the author to: (1) add an install spec for required Python packages and clearly declare 'cloudflared' as a required binary, (2) document exactly which inputs are used, and (3) add safeguards to the share step (confirmation, restrict serve dir, or opt-out of automatic sharing).