Security audit
Security checks across malware telemetry and agentic risk
This skill appears purpose-built for reading chat images, but it needs review because it handles chat credentials and attachments with loosely scoped downloading and storage behavior.
Install only if you are comfortable granting chat bot or app credentials that can read messages and download attachments. Use least-privilege platform scopes, restrict the bot to the needed chats or workspaces, avoid broad direct URL inputs, and treat downloaded images as sensitive local files that may also be processed by the configured image analysis tool.
def download_discord_image(url: str, output_path: str) -> str:
"""Download image from Discord (direct URL)."""
resp = requests.get(url)
resp.raise_for_status()
with open(output_path, "wb") as f:media_url = resp.json()["url"]
# Download media
resp = requests.get(media_url, headers={"Authorization": f"Bearer {token}"})
resp.raise_for_status()
with open(output_path, "wb") as f:download_url = resp.json()["file"]["url_private_download"]
# Download file
resp = requests.get(download_url, headers={"Authorization": f"Bearer {token}"})
resp.raise_for_status()
with open(output_path, "wb") as f:def download_direct_url(url: str, output_path: str, headers: dict = None) -> str:
"""Download image from direct URL."""
resp = requests.get(url, headers=headers or {})
resp.raise_for_status()
with open(output_path, "wb") as f:65/65 vendors flagged this skill as clean.
No suspicious patterns detected.