pinterest — Security Analysis | AgentFend

返回技能库

Git已验证

查看源码

20/100

这个 skill 比 Git 类别平均水平更有风险 77%。

Voir le score complet

Connectez-vous pour afficher le score detaille du skill.

Impact Scope

本地

网络

全局

修复建议

⛔ Score 20/100 — This skill presents serious risks. Manual audit required.

⚡ System command execution via subprocess/os.system (Python).

🔑 Hardcoded secret in source code.

$npx agentfend install cmn92movw008zu1iptyb0e3mx

说明

Search and browse Pinterest pins, get pin details, and send actual images to the user via Telegram/messaging. Use when the user wants to find inspiration, search for images/ideas, or browse Pinterest content. Sends images directly, not just links.

Git已验证创作者

Trust Score

36trust

⭐ 3492🍴 987

Updated 5小时前

分析时间

2026年3月27日 15:43

检测到的风险4

Python Subprocesscritical

python_subprocess

System command execution (Python)

Line 20

Snippets

L20 subprocess.check_call([sys.executable, "-m", "pip", "install", "httpx", "-q"])

Hardcoded Secrethigh

hardcoded_secret

Potentially hardcoded secret

Line 81

Snippets

L81export PINTEREST_ACCESS_TOKEN="your_token"

L51export PINTEREST_ACCESS_TOKEN="pina_YOUR_TOKEN_HERE"

Network Callmedium

network_call

Outbound network call

Line 73

Snippets

L73 "X-Requested-With": "XMLHttpRequest"

Env Accessmedium

env_access

Environment variable access

Line 30

Snippets

L30 return os.environ.get("PINTEREST_ACCESS_TOKEN")

Voir les risques detectes

Connectez-vous pour consulter l'analyse detaillee des risques.