Skill audit report

PicUploader Audit report.

一个还不错的图床工具,支持Mac/Win/Linux服务器、支持压缩后上传、添加图片或文字水印、多文件同时上传、同时上传到多个云、右击任意文件上传、快捷键上传剪贴板截图、Web版上传、支持作为Mweb/Typora发布图片接口、作为PicGo/ShareX/uPic等的自定义图床,支持在服务器上部署作为图床接口,支持上传任意格式文件。

EXPERIMENTAL · REVIEWNeeds reviewGenerated Aug 3, 2026Heuristic metadata audit
72
Audit
81
Trust
71
Quality
89
Security
20
Maintain
92
Install

OpenAgentSkill Trust Score

81
Strong shortlist

OpenAgentSkill Trust Score

The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.

GitHub adoption

PASS

86

1.2K GitHub stars

Stars/forks activity

INFO

77

1.2K stars, 169 forks; issue activity unavailable in current metadata

Recent maintenance

FAIL

22

2y since push

License clarity

PASS

86

MIT

README/SKILL.md completeness

PASS

90

Metadata includes enough usage and workflow context

Dependency/runtime risk

PASS

90

no major dependency risk hints in public metadata

Install availability

PASS

92

npx skills add xiebruce/PicUploader

Install command safety

PASS

92

standard package or runtime install path

Permission surface

PASS

86

filesystem or document access

Repository evidence

PASS

86

https://github.com/xiebruce/PicUploader

Review status

PASS

88

AI review data available

Agent Proven outcomes

INFO

54

No agent outcome data yet

Checks

Install and adoption review

9 Passed · 6 Needs review

Install path

92

PASS

npx skills add xiebruce/PicUploader

Repository

88

PASS

https://github.com/xiebruce/PicUploader

License

86

PASS

MIT

Maintenance

20

FIX

2y since push

AI review

88

PASS

Approved with no listed issues

README/SKILL.md completeness

90

PASS

Usable description available

Dependency risk

90

PASS

no major dependency risk hints in public metadata

Install command safety

92

PASS

standard package or runtime install path

Permission surface

86

PASS

filesystem or document access

Stars/forks activity

77

CHECK

1.2K stars, 169 forks; issue activity unavailable in current metadata

Adoption

88

PASS

1.2K GitHub stars

Warnings

  • Repository appears stale
  • Repository looks stale
  • Quality score needs review
  • Recent maintenance: 2y since push

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Compare nearby options

Related skills to audit next