pinterest — Security Analysis | AgentFend

Zuruck zur Bibliothek

GitVerifiziert

Quelle ansehen

20/100

Dieser Skill ist 77% riskanter als der Durchschnitt der Kategorie Git.

Voir le score complet

Connectez-vous pour afficher le score detaille du skill.

Impact Scope

Lokal

Netzwerk

Global

Empfehlungen

⛔ Score 20/100 — This skill presents serious risks. Manual audit required.

⚡ System command execution via subprocess/os.system (Python).

🔑 Hardcoded secret in source code.

$npx agentfend install cmn92movw008zu1iptyb0e3mx

Beschreibung

Search and browse Pinterest pins, get pin details, and send actual images to the user via Telegram/messaging. Use when the user wants to find inspiration, search for images/ideas, or browse Pinterest content. Sends images directly, not just links.

GitVerifizierter Ersteller

Trust Score

36trust

⭐ 3492🍴 987

Updated vor 3 Tagen

Analysiert

27.03.2026, 15:43

Erkannte Risiken4

Python Subprocesscritical

python_subprocess

System command execution (Python)

Line 20

Snippets

L20 subprocess.check_call([sys.executable, "-m", "pip", "install", "httpx", "-q"])

Hardcoded Secrethigh

hardcoded_secret

Potentially hardcoded secret

Line 81

Snippets

L81export PINTEREST_ACCESS_TOKEN="your_token"

L51export PINTEREST_ACCESS_TOKEN="pina_YOUR_TOKEN_HERE"

Network Callmedium

network_call

Outbound network call

Line 73

Snippets

L73 "X-Requested-With": "XMLHttpRequest"

Env Accessmedium

env_access

Environment variable access

Line 30

Snippets

L30 return os.environ.get("PINTEREST_ACCESS_TOKEN")

Voir les risques detectes

Connectez-vous pour consulter l'analyse detaillee des risques.