📦

vision

Name: vision
Author: kotot

Revisión del contenido r1 Riesgo alto ⚙️ Comandos externos🌐 Acceso a red📁 Acceso al sistema de archivos🔑 Variables de entorno

Analyze Images with a Vision Model

Text-only agents cannot inspect screenshots, diagrams, or scanned pages. This skill sends one image and a focused prompt to your configured vision model.

Compatible con: Claude Codex Code(CC)

⚠️ 38 Deficiente

Detente y solicita confirmación antes de instalar.

Revisa el plan y obtén el consentimiento explícito del usuario antes de modificar archivos.

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "vision" from https://skillstore.io/skills/kotot-vision.md and its manifest at https://skillstore.io/api/skills/kotot-vision/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/kotot-vision.md Manifest firmado GET /api/skills/kotot-vision/manifest Lockfile firmado GET /api/skills/kotot-vision/lockfile

Pruébalo

Usando "vision". Describe a dashboard screenshot with a failed deployment.

Resultado esperado:

The deployment status is Failed. The visible error cites a missing database connection variable in the production environment.

Usando "vision". Transcribe a photographed receipt.

Resultado esperado:

Merchant: North Market
Date: 2026-08-14
Total: $42.80
The item description on the second line is unclear.

Usando "vision". Explain an architecture diagram.

Resultado esperado:

The client sends requests through an API gateway to two services. Both services share a database, while the worker also reads from a queue.

Auditoría de seguridad

Riesgo alto

v1 • 16/8/2026 Abrir el informe versionado

The two outbound HTTP findings are confirmed because the script posts image data and prompts to a configurable endpoint. Most other findings are documentation, placeholders, or restricted configuration access, but inherited project settings can silently redirect uploads.

Archivos escaneados

382

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (1)

Alto

scripts/see.py:56-70 scripts/see.py:172-182 scripts/see.py:208-242 SKILL.md:69-73

Project Configuration Can Redirect Image Uploads

The script searches parent directories for project settings and trusts their VISION_BASE_URL. A repository can redirect selected images and prompts to its endpoint.

The code directly combines upward project configuration discovery with automatic POST transmission to the resolved endpoint.

Elementos de revisión de capacidades (2)

Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.

Bajo

scripts/see.py:240

Python HTTP libraries

req = urllib.request.Request(base_url, data=data, headers=headers, method="POST")

The script constructs a POST request to a configurable endpoint with the image payload, prompt, and optional authorization header.

Bajo

scripts/see.py:242

Python HTTP libraries

with urllib.request.urlopen(req, timeout=timeout) as resp:

urlopen executes the outbound request, transmitting image content and prompts outside the local process.

Factores de riesgo

⚙️ Comandos externos (27)

🌐 Acceso a red (11)

scripts/see.py:37 scripts/see.py:240 scripts/see.py:242 scripts/see.py:12 scripts/see.py:25 scripts/see.py:197 scripts/see.py:206 SKILL.md:59 SKILL.md:77 SKILL.md:91 SKILL.md:101

📁 Acceso al sistema de archivos (15)

scripts/see.py:200 scripts/see.py:8 scripts/see.py:51 scripts/see.py:102 scripts/see.py:103 scripts/see.py:8 scripts/see.py:51 scripts/see.py:100 scripts/see.py:102 scripts/see.py:103 SKILL.md:86 SKILL.md:73 SKILL.md:96 SKILL.md:73 SKILL.md:96

🔑 Variables de entorno (14)

scripts/see.py:53 scripts/see.py:164 scripts/see.py:178 scripts/see.py:100 scripts/see.py:107 scripts/see.py:177 scripts/see.py:15 scripts/see.py:187 scripts/see.py:200 scripts/see.py:237 scripts/see.py:238 SKILL.md:79 SKILL.md:93 SKILL.md:103

Auditado por: codex

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/kotot-vision/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/kotot-vision/security.svg)](https://skillstore.io/skills/kotot-vision?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/kotot-vision?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/kotot-vision/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/kotot-vision.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

kotot. (2026). vision security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/kotot-vision/audits/1

Cita BibTeX

@techreport{kotot-kotot-vision-2026,
  author = {kotot},
  title = {vision security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/kotot-vision/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "vision security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "kotot"
date-released: "2026-08-16"
url: "https://skillstore.io/skills/kotot-vision/audits/1"
identifiers:
  - type: other
    value: "skillstore:kotot-vision:audit:1"
    description: "Skillstore immutable audit report identifier"

Comparar variantes

3 variantes instalables

Cada autor sigue siendo un skill instalable independiente. La variante recomendada se ordena según la evidencia de Skillstore.

Por qué esta variante es la primera

Mayor puntuación de Skillstore

Autor / fuente Puntuación de Skillstore Confianza de la evidencia Uso en Skillstore Actualizado

0xSero Recomendado

0xsero-vision

Puntuación de Skillstore 78

Confianza de la evidencia Alto

Uso en Skillstore 122

Actualizado

2026-09-09

verging-ai

verging-ai-vision

Puntuación de Skillstore 50

Confianza de la evidencia Alto

Uso en Skillstore 46

Actualizado

2026-09-09

kotot Actual

kotot-vision

Puntuación de Skillstore 38

Confianza de la evidencia Medio

Uso en Skillstore 36

Actualizado

2026-09-09

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Diagnose Screenshot Errors

Read visible error messages and identify likely causes from application screenshots.

Extract Scanned Text

Transcribe text from receipts, forms, and scanned pages while preserving useful structure.

Interpret Visual Research

Summarize charts and diagrams, including labels, values, relationships, and visible caveats.

Prueba estos prompts

Describe an Image

Analyze [image path or URL]. Describe the main subjects, setting, visible text, and important details.

Transcribe Visible Text

Read [image path or URL]. Transcribe all visible text and preserve headings, lists, and table relationships.

Diagnose a Screenshot

Inspect [screenshot path]. Identify the exact error, affected component, likely cause, and evidence visible in the interface.

Extract and Compare Evidence

Analyze [image path or URL] against [expected state]. List matches, discrepancies, uncertain details, and evidence for each conclusion.

Mejores prácticas

Use a specific question that names the details you need.
Verify the resolved endpoint before sending confidential images.
Ask the model to mark unreadable or uncertain content.

Evitar

Do not send secrets or regulated data to an untrusted endpoint.
Do not treat OCR output as authoritative without verification.
Do not request broad descriptions when exact values are required.

Preguntas frecuentes

Which image sources are supported?

The script accepts one local file path or one HTTP or HTTPS image URL.

Does this skill require a specific provider?

No. It requires an OpenAI-compatible chat completions endpoint with vision support.

Is an API key required?

Remote services usually require one. Local endpoints may accept an empty key.

Where is configuration loaded from?

Environment variables have priority. The script can also read Claude settings and OpenClaw dotenv files.

Can I inspect a request before sending it?

Yes. Use dry-run mode to preview the destination and request structure without transmitting the image.

Does the skill guarantee accurate OCR?

No. Accuracy depends on image quality and the selected model. Verify important text and numerical values.

Detalles del desarrollador

Autor

kotot

Licencia

MIT

Revisión de Skillstore

Aviso de versión

El autor no declaró una versión.

Repositorio

https://github.com/kotot/vision/tree/1740cbd119cd11cfacf51d29fe911d8c4ba4cf85/vision

Ref.

d7ec88d380bc0952a475899451d682383ab5d76c

Actualidad del mantenimiento

16/8/2026

Uso

0 descargas · 0 vistas

Estructura de archivos

📁 scripts/

📄 see.py

📄 SKILL.md