cloud-uploader
Uploads promo videos to Cloudflare R2 or AWS S3 for hosting and distribution on social media.
Install this skill
Security score
The cloud-uploader skill was audited on Jun 5, 2026 and we found 10 security issues across 2 threat categories, including 5 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 70 | See `${CLAUDE_PLUGIN_ROOT}/reference/cloud/setup-guide.md` for detailed setup instructions. |
Template literal with variable interpolation in command context
| 80 | ```bash |
Template literal with variable interpolation in command context
| 260 | - See `${CLAUDE_PLUGIN_ROOT}/reference/cloud/setup-guide.md` |
Template literal with variable interpolation in command context
| 343 | - `${CLAUDE_PLUGIN_ROOT}/reference/cloud/setup-guide.md` - Detailed setup instructions |
Template literal with variable interpolation in command context
| 344 | - `${CLAUDE_PLUGIN_ROOT}/skills/promo-director/SKILL.md` - Generate promo videos |
Template literal with variable interpolation in command context
| 345 | - `${CLAUDE_PLUGIN_ROOT}/skills/release-director/SKILL.md` - Release workflow |
Access to hidden dotfiles in home directory
| 48 | Cloud credentials must be configured in `~/.bitwize-music/config.yaml`: |
Access to hidden dotfiles in home directory
| 82 | ~/.bitwize-music/venv/bin/pip install -r ${CLAUDE_PLUGIN_ROOT}/requirements.txt |
Access to hidden dotfiles in home directory
| 88 | The upload script uses `~/.bitwize-music/venv` if available, otherwise falls back to system Python. |
Access to hidden dotfiles in home directory
| 96 | cat ~/.bitwize-music/config.yaml | grep -A 20 "cloud:" |