pinterest — Security Analysis | AgentFend

Volver a la biblioteca

GitVerificado

Ver fuente

20/100

Este skill es 77% mas riesgoso que el promedio de la categoria Git.

Voir le score complet

Connectez-vous pour afficher le score detaille du skill.

Impact Scope

Local

Red

Global

Recomendaciones

⛔ Score 20/100 — This skill presents serious risks. Manual audit required.

⚡ System command execution via subprocess/os.system (Python).

🔑 Hardcoded secret in source code.

$npx agentfend install cmn92movw008zu1iptyb0e3mx

Descripcion

Search and browse Pinterest pins, get pin details, and send actual images to the user via Telegram/messaging. Use when the user wants to find inspiration, search for images/ideas, or browse Pinterest content. Sends images directly, not just links.

GitCreador verificado

Trust Score

36trust

⭐ 3,5 mil🍴 987

Updated hace 3 días

Analizado

27 mar 2026, 15:43

Riesgos Detectados4

Python Subprocesscritical

python_subprocess

System command execution (Python)

Line 20

Snippets

L20 subprocess.check_call([sys.executable, "-m", "pip", "install", "httpx", "-q"])

Hardcoded Secrethigh

hardcoded_secret

Potentially hardcoded secret

Line 81

Snippets

L81export PINTEREST_ACCESS_TOKEN="your_token"

L51export PINTEREST_ACCESS_TOKEN="pina_YOUR_TOKEN_HERE"

Network Callmedium

network_call

Outbound network call

Line 73

Snippets

L73 "X-Requested-With": "XMLHttpRequest"

Env Accessmedium

env_access

Environment variable access

Line 30

Snippets

L30 return os.environ.get("PINTEREST_ACCESS_TOKEN")

Voir les risques detectes

Connectez-vous pour consulter l'analyse detaillee des risques.