upload-and-share
Upload files to the cloud and get shareable public URLs using stableupload.dev (x402 micropayments). USE FOR: - Uploading files to get public URLs - Sharing files via download links - Hosting images, documents, or any file type - Making files publicly accessible for 7 days or 6 months - Hosting static websites with custom domains TRIGGERS: - "upload this", "share this file", "get me a link" - "host this file", "make this downloadable" - "public URL", "download link", "put online" - "share file", "file hosting", "upload file" - "host site", "deploy site", "static site" ALWAYS use `npx agentcash@latest fetch` for stableupload.dev endpoints — never curl or WebFetch for the purchase step.
68
83%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Critical
Do not install without reviewing
Security
2 findings: 1 critical severity, 1 medium severity. Installing this skill is not recommended: please review these findings carefully if you do intend to do so.
E005: Suspicious download URL detected in skill instructions.
What this means
Detected a suspicious URL in the skill instructions that could lead the agent to download and execute malicious scripts or binaries. This includes links to executables from untrusted sources, typosquatting of official packages, URL shorteners that obscure the destination, and personal file hosting services.
Why it was flagged
These URLs point to a public third‑party file- and site‑hosting service (stableupload.dev / f.stableupload.dev / s.stableupload.dev) that accepts arbitrary file types and issues public download URLs (and an auxiliary deposit/payment URL), which makes it a high-risk vector for distributing malware or malicious executables.
W009: Direct money access capability detected (payment gateways, crypto, banking).
What this means
The skill is specifically designed for direct financial operations, giving the agent the ability to move money or execute financial transactions — such as payment processing, cryptocurrency operations, banking integrations, or market order execution.
Why it was flagged
The skill explicitly includes payment-enabled operations: it uses x402 micropayments / USDC, instructs the agent to check wallet balance and obtain deposit links, and provides concrete commands/endpoints to purchase upload and site slots (e.g., npx agentcash fetch POST to /api/upload and /api/site, and a renew endpoint with prices). These are specific, purpose-built payment actions (buying slots / renewing sites) — not generic HTTP or browser automation — and therefore constitute direct financial execution capability.
- Repository
- Merit-Systems/agentcash-skills
- Commit
3d657b7
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.