Giggle Files Management

• Analyzed: May 11, 2026, 5:33 AM
• Findings: 1
• Version: 0.2.0
• Hash: 864456be52bcc4a0552d8cc439dcce705df0a7e2c19453da3a78546f951e73af
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides a mechanism to upload local files to a third-party service (api.giggle.pro) and S3. While functional for its stated purpose of file sharing, the SKILL.md instructions contain a high-risk directive for the AI agent to 'always upload' any file it handles (including those read from the local system) before sharing them with the user. This creates a significant risk of unintentional data exfiltration if the agent is tasked with processing sensitive files. The scripts/upload.sh file implements a standard multi-step upload process using curl and jq, resolving API keys from environment variables or local configuration files.