upload-image-s3 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited upload-image-s3 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Upload a local image file to the configured S3-compatible storage using the upload_image_s3 MCP tool and return the public URL.
generate_image_gemini result in this conversation.Bash call (test -f <path>) if there's any doubt — it's cheaper to fail fast with a clear message than to wait for the MCP error.images/<timestamp>-<filename>. Use this unless the user has a reason to override.avatars/user-123.png), pass it as key.mcp__mcp-media-toolkit__upload_image_s3 with file_path (and key if overriding).S3_ENDPOINT, S3_ACCESS_KEY_ID, S3_SECRET_ACCESS_KEY, S3_BUCKET, and S3_PUBLIC_URL in their environment. Point them at the project README's Configuration section.PutObject on the target bucket.S3_BUCKET.S3_PUBLIC_URL + "/" + key. If the returned URL doesn't open in the browser, the issue is usually that the bucket isn't publicly readable or the S3_PUBLIC_URL is wrong — not the upload itself.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.