cloud-uploader
Uploads promo videos to Cloudflare R2 or AWS S3 for hosting and distribution on social media.
Install this skill
Security score
The cloud-uploader skill was audited on Mar 1, 2026 and we found 10 security issues across 2 threat categories, including 5 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 69 | See `${CLAUDE_PLUGIN_ROOT}/reference/cloud/setup-guide.md` for detailed setup instructions. |
Template literal with variable interpolation in command context
| 79 | ```bash |
Template literal with variable interpolation in command context
| 259 | - See `${CLAUDE_PLUGIN_ROOT}/reference/cloud/setup-guide.md` |
Template literal with variable interpolation in command context
| 342 | - `${CLAUDE_PLUGIN_ROOT}/reference/cloud/setup-guide.md` - Detailed setup instructions |
Template literal with variable interpolation in command context
| 343 | - `${CLAUDE_PLUGIN_ROOT}/skills/promo-director/SKILL.md` - Generate promo videos |
Template literal with variable interpolation in command context
| 344 | - `${CLAUDE_PLUGIN_ROOT}/skills/release-director/SKILL.md` - Release workflow |
Access to hidden dotfiles in home directory
| 47 | Cloud credentials must be configured in `~/.bitwize-music/config.yaml`: |
Access to hidden dotfiles in home directory
| 81 | ~/.bitwize-music/venv/bin/pip install -r ${CLAUDE_PLUGIN_ROOT}/requirements.txt |
Access to hidden dotfiles in home directory
| 87 | The upload script uses `~/.bitwize-music/venv` if available, otherwise falls back to system Python. |
Access to hidden dotfiles in home directory
| 95 | cat ~/.bitwize-music/config.yaml | grep -A 20 "cloud:" |
Install this skill with one command
/learn @bitwize-music-studio/cloud-uploader