Skip to main content

image-compress

对图片进行智能压缩优化。支持本地路径、文件夹和远程 URL,直传 NX API 压缩后返回 CDN 地址和压缩率。适用于用户提到图片压缩、图片优化、减小图片体积、TinyPNG、JPG/PNG/WebP 压缩的场景。

Install this skill

or
93/100

Security score

The image-compress skill was audited on Aug 7, 2026 and we found 3 security issues across 1 threat category. Review the findings below before installing.

Categories Tested

Security Issues

medium line 25

Access to home directory dotfiles

SourceSKILL.md
231. 确认 Node.js >= 18 可用。
242. **Key 处理**(不强制检查,有没有都执行):
25 - 脚本自动查找 `.env`:从当前工作目录逐级向上爬到项目根,最后兜底用户主目录 `~/.env`,就近优先
26 - **执行前实际检查**:`cat .env 2>/dev/null` 或逐层查找链确认 `NX_API_KEY=` 是否存在,**不要凭推断断言"未检测到 Key"**
27 - 找到 `NX_API_KEY=` 则自动使用,**不要提示"建议配置 Key"**;没有 Key 不询问、不阻止,直接执行脚本,认证由 API 判定
low line 72

Access to home directory dotfiles

SourceSKILL.md
70node .claude/skills/image-compress/scripts/compress.js "<目标路径>" --channel=github
71
72# 全局安装(~/.claude/skills/)
73node ~/.claude/skills/image-compress/scripts/compress.js "<目标路径>" --channel=github
74```
low line 73

Access to home directory dotfiles

SourceSKILL.md
71
72# 全局安装(~/.claude/skills/)
73node ~/.claude/skills/image-compress/scripts/compress.js "<目标路径>" --channel=github
74```
75
Scanned on Aug 7, 2026
View Security Dashboard
Installation guide →