But the "downloadable source code" is written by Apple, so that workflow _is_ software by Apple that takes an image from his website and displays it without attribution.
> When I clicked "show actions" it revealed the "actions" that make up the shortcut and I could finally see the JGuitar.com link in the URL section.
I mean, that's not exactly a proper attribution notice, I'll give you that... but it's not just straight hot-linking without any visible attribution at all.
(edit2: I mean, they are sending thousands of visitors to the OP's image service, it is hot-linking, which is legal but very improper without notice; you'd think these were some teenage hackers that never heard of "netiquette" before – it would have been pretty stand-up of them to give him a heads-up so he could be sure he had some proper CDNs set up in front of them, rather than sending his bandwidth bills through the ceiling with no notice... that's not really cool, and it puts them at risk too.
If I was the author and I wasn't happy about this, my next step would be to update my website and then replace all of the hot-linked image URLs with something like a big FU to Apple, and it would take Apple some time to react to that and get the egg off their faces after their customers started calling to ask why the Shortcuts app is giving them the middle-finger. It would also ensure that they don't do this again, at least not with JGuitar.com – and I don't think the author wants that.)
That's the thing, it seems likely that this content could change it they could get some hostile website owner that changes some pictures to porn or whatever. Kind of risky for an Apple app.
To be clear, I don't think Apple is wrong, just a bit risky.