Is upload-image-cloudinary safe to install?

SaferSkills independently audited upload-image-cloudinary (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

skills/upload-image-cloudinary/SKILL.md · 1 file

skills/upload-image-cloudinary/SKILL.md1.3 KB · Markdown

name: upload-image-cloudinary

description: Upload images to Cloudinary and get public URLs. Use when screenshots, evidence images, or any image file need to be hosted for sharing (e.g. PR body, docs, reports). Requires CLOUDINARY_CLOUD_NAME, CLOUDINARY_API_KEY and CLOUDINARY_API_SECRET.

Upload de imagem para Cloudinary

Quando usar

Publicar imagens (screenshots, evidências, assets) e obter uma URL HTTPS pública.
Útil para PRs, documentação, relatórios ou qualquer fluxo que exija imagens hospedadas.

Configuração

Variáveis de ambiente obrigatórias (nunca expor o API Secret no client-side):

CLOUDINARY_CLOUD_NAME
CLOUDINARY_API_KEY
CLOUDINARY_API_SECRET

Como fazer o upload

Endpoint: POST https://api.cloudinary.com/v1_1/<CLOUD_NAME>/image/upload
Autenticação: Basic Auth com CLOUDINARY_API_KEY e CLOUDINARY_API_SECRET.
Body (multipart):

file = arquivo da imagem (obrigatório).
public_id = opcional (ex.: pr-evidencia-antes-mobile, docs-screenshot-1).

Resposta: Da resposta JSON do upload, usar apenas o campo `secure_url` (URL HTTPS pública) para referenciar a imagem.

Uso da URL

Inserir secure_url onde for necessário (Markdown, HTML, etc.), por exemplo: ![Descrição](<secure_url>).

upload-image-cloudinary— agent skill

Is upload-image-cloudinary safe to install?

Upload de imagem para Cloudinary

Quando usar

Configuração

Como fazer o upload

Uso da URL

Audit the pieces. Scan the whole. Decide.