skills/vm0-ai/vm0-skills/cloudinary/Gen Agent Trust Hub

cloudinary

Pass

Audited by Gen Agent Trust Hub on Apr 5, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes common shell commands such as curl, sha1sum, date, cut, and echo to prepare and send API requests to Cloudinary. These operations are restricted to generating signatures and performing uploads/deletions.
  • [DATA_EXFILTRATION]: The skill accesses the environment variables CLOUDINARY_TOKEN and CLOUDINARY_API_SECRET to authenticate requests. This sensitive data is transmitted to api.cloudinary.com, which is the official endpoint for the well-known Cloudinary service. This behavior is expected for an API integration skill.
  • [EXTERNAL_DOWNLOADS]: The skill references and interacts with Cloudinary's official domains (cloudinary.com, api.cloudinary.com, res.cloudinary.com) for documentation, API interaction, and media delivery.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 5, 2026, 09:13 PM