github-image-hosting

Upload images to img402.dev for embedding in GitHub PRs, issues, and comments. Images under 1MB are uploaded free (no payment, no auth) and persist for 7 days. Use when the agent needs to share an image in a GitHub context — screenshots, mockups, diagrams, or any visual. Triggers: "screenshot this", "attach an image", "add a screenshot to the PR", "upload this mockup", or any task producing an image for GitHub.

Security Scan

The skill's requirements and runtime instructions are mostly coherent for uploading images to a third‑party image host and embedding them in GitHub, but there are a few small gaps and privacy considerations to be aware of before installing.

Purpose & Capability

The skill's name/description match what the SKILL.md instructs (use curl to POST to img402.dev and use gh to add the returned URL to PRs/issues). Required binaries list curl and gh which is appropriate. Minor mismatch: SKILL.md also uses macOS-specific utilities (screencapture, sips) but those are not listed in the required binaries or described as platform-specific.

Instruction Scope

Instructions explicitly upload local image files to https://img402.dev/api/free and then post the returned public URL to GitHub via the gh CLI — this is exactly the stated purpose. The instructions do cause user images to be transmitted to an external third‑party host (necessary for the feature). They also assume gh is authenticated (gh uses local credentials/config) and use macOS-only screenshot/resize commands without cross-platform alternatives; the skill does not instruct reading unrelated files or secrets.

Install Mechanism

There is no install spec and no code files; this is instruction‑only and therefore doesn't write code to disk or fetch external archives. That is the lowest‑risk install pattern and consistent with the skill's simplicity.

Credentials

The skill requests no environment variables and no credentials from the registry metadata, which matches the claim of "no auth" for img402.dev. However, use of the gh CLI implies reliance on the agent user's existing GitHub credentials/config (gh stores auth elsewhere); that implicit dependency is reasonable but not documented in requires.env. Also, images will be uploaded to an external service — no secret tokens are needed, but sensitive images will be externally transmitted.

Persistence & Privilege

always is false and the skill does not request elevated or persistent system presence. It does not modify other skills or system configs. Autonomous invocation is allowed (platform default) but not combined with other concerning privileges.

Assessment

This skill is internally consistent for its stated purpose, but check a few things before enabling it: 1) Images are uploaded to a third‑party host (img402.dev) and become publicly accessible via the returned URL — avoid uploading sensitive screenshots. 2) The SKILL.md uses macOS commands (screencapture, sips); on Linux/Windows you’ll need alternate screenshot/resize tools. 3) gh commands rely on your local gh authentication/config — ensure gh is configured and you’re comfortable letting the agent invoke it. 4) The skill source/homepage is unknown; if you need stronger assurance, verify the img402.dev service and the skill author before use. If those points are acceptable, the skill appears to do what it says.

Image Upload for GitHub

Upload an image to img402.dev's free tier and embed the returned URL in GitHub markdown.

Quick reference

# Upload (multipart)
curl -s -X POST https://img402.dev/api/free -F image=@/tmp/screenshot.png

# Response
# {"url":"https://i.img402.dev/aBcDeFgHiJ.png","id":"aBcDeFgHiJ","contentType":"image/png","sizeBytes":182400,"expiresAt":"2026-02-17T..."}

Workflow

1. Get image: Use an existing file, or capture a screenshot:

   screencapture -x /tmp/screenshot.png        # macOS — full screen
   screencapture -xw /tmp/screenshot.png       # macOS — frontmost window
   

2. Verify size: Must be under 1MB. If larger, resize:

   sips -Z 1600 /tmp/screenshot.png  # macOS — scale longest edge to 1600px
   

3. Upload:

   curl -s -X POST https://img402.dev/api/free -F image=@/tmp/screenshot.png
   

4. Embed the returned url in GitHub markdown:

   ![Screenshot description](https://i.img402.dev/aBcDeFgHiJ.png)
   

GitHub integration

Use gh CLI to embed images in PRs and issues:

# Add to PR description
gh pr edit --body "$(gh pr view --json body -q .body)

![Screenshot](https://i.img402.dev/aBcDeFgHiJ.png)"

# Add as PR comment
gh pr comment --body "![Screenshot](https://i.img402.dev/aBcDeFgHiJ.png)"

# Add to issue
gh issue comment 123 --body "![Screenshot](https://i.img402.dev/aBcDeFgHiJ.png)"

Constraints

• Max size: 1MB
• Retention: 7 days — suitable for PR reviews, not permanent docs
• Formats: PNG, JPEG, GIF, WebP
• Rate limit: 1,000 free uploads/day (global)
• No auth required

Tips

• Prefer PNG for UI screenshots (sharp text). Use JPEG for photos.
• If a screenshot is too large, reduce dimensions with sips -Z 1600 before uploading.
• When adding to a PR body or comment, use gh pr comment or gh pr edit with the image markdown.

Paid tier

For permanent images (1 year, 5MB max), use the paid endpoint at $0.01 USDC via x402. See https://img402.dev/blog/paying-x402-apis for details.