Habilidades deepseek-vision-bridge
📦
deepseek-vision-bridge
Revisión del contenido r1 Crítico 📁 Acceso al sistema de archivos🌐 Acceso a red🔑 Variables de entorno⚡ Contiene scripts⚙️ Comandos externos
Add Vision and Image Generation to DeepSeek
Text-only DeepSeek clients cannot interpret pasted images or produce image files. This skill deploys a proxy using OCR, vision models, and generation backends.
Compatible con: Claude Codex Code(CC)
No instales este Skill automáticamente.
La política canónica exige la revisión de un operador antes de cualquier acción de instalación.
Instalar con mi Agente
Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.
Solicitud de agente
Review the Skillstore skill "deepseek-vision-bridge" from https://skillstore.io/skills/lightlw-deepseek-vision-bridge.md and its manifest at https://skillstore.io/api/skills/lightlw-deepseek-vision-bridge/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.
Recursos legibles por agentes
Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.
Pruébalo
Usando "deepseek-vision-bridge". Check whether this computer can run the bridge.
Resultado esperado:
Node.js is available. Ollama is not running. The proxy port is free. Cloud vision needs a configured SiliconFlow key.
Usando "deepseek-vision-bridge". Set up local OCR and vision without cloud services.
Resultado esperado:
The plan uses Tesseract and Ollama, keeps images local, and lists the configuration changes requiring approval.
Usando "deepseek-vision-bridge". Why are pasted images not reaching DeepSeek correctly?
Resultado esperado:
The proxy is not listening on the configured port. Start it, confirm the Codex base URL, then inspect the proxy log.
Auditoría de seguridad
Críticov1 • 1/8/2026 Abrir el informe versionado
Many static alerts are false positives caused by Markdown, templates, loopback addresses, and JavaScript template literals. Confirmed risks include shell injection, credential-bearing network forwarding, sensitive configuration access, unauthenticated all-interface listening, SSRF, and Windows autostart persistence. The generated tool output also contains an instruction that discourages image verification.
18
Archivos escaneados
2,142
Líneas analizadas
79
Elementos de revisión
0
Falsos positivos ignorados
Preocupaciones de seguridad confirmadas (17)
Crítico
[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
This combination is common in credential stealers and RATs
The combination is real: image-gen.js has injectable shell execution, while ocr-proxy.js performs network forwarding and reads API credentials. These capabilities can be chained for code execution and credential misuse.
Crítico
Unauthenticated Credential-Bearing Open Proxy
The HTTP server accepts requests without client authentication, listens on all interfaces, and replaces Authorization with the stored DeepSeek key. Network clients can relay requests using the owner's account.
The server has no authentication check, server.listen omits a loopback host, and every forwarded request receives the stored DeepSeek credential.
Alto
Environment file access
const ENV_PATH = fs.existsSync(path.join(TOOLS_DIR, ".env"))
Runtime code selects or reads .env data to obtain the SiliconFlow credential, including a fallback outside the proxy directory. This is real sensitive-file access.
Alto
Environment file access
? path.join(TOOLS_DIR, ".env")
Runtime code selects or reads .env data to obtain the SiliconFlow credential, including a fallback outside the proxy directory. This is real sensitive-file access.
Alto
Environment file access
: path.join(TOOLS_DIR, "..", "..", "tools", ".env");
Runtime code selects or reads .env data to obtain the SiliconFlow credential, including a fallback outside the proxy directory. This is real sensitive-file access.
Alto
Environment file access
if (process.env[name]) return process.env[name].trim();
Runtime code selects or reads .env data to obtain the SiliconFlow credential, including a fallback outside the proxy directory. This is real sensitive-file access.
Alto
Environment file access
const ENV_PATH = fs.existsSync(LOCAL_ENV_PATH) ? LOCAL_ENV_PATH : path.join(__dirname, '..', '..', '
The code selects an external .env path, reads DEEPSEEK_API_KEY, or locates ~/.codex/config.toml for a bearer token. This is direct sensitive configuration access.
Alto
Environment file access
if (process.env.DEEPSEEK_API_KEY) {
The code selects an external .env path, reads DEEPSEEK_API_KEY, or locates ~/.codex/config.toml for a bearer token. This is direct sensitive configuration access.
Mostrar los 17 problemas confirmados
Alto
Environment file access
cachedDeepSeekKey = process.env.DEEPSEEK_API_KEY.trim();
The code selects an external .env path, reads DEEPSEEK_API_KEY, or locates ~/.codex/config.toml for a bearer token. This is direct sensitive configuration access.
Alto
Environment file access
const tomlPath = path.join(process.env.USERPROFILE || process.env.HOME || '', '.codex', 'config.toml
The code selects an external .env path, reads DEEPSEEK_API_KEY, or locates ~/.codex/config.toml for a bearer token. This is direct sensitive configuration access.
Alto
Environment file access
├── .env ← 从 assets/.env.template 复制并填写
The skill instructs the agent to create, edit, or rely on a .env file containing API keys. This is an intended but sensitive action in executable skill guidance.
Alto
Environment file access
复制 assets 下文件到代理目录,然后编辑 `.env`:
The skill instructs the agent to create, edit, or rely on a .env file containing API keys. This is an intended but sensitive action in executable skill guidance.
Alto
Environment file access
- 每台机器的 key、端口、模型名不同,以用户机器的 .env / config.toml 为准
The skill instructs the agent to create, edit, or rely on a .env file containing API keys. This is an intended but sensitive action in executable skill guidance.
Alto
[HEURISTIC] SUSPICIOUS COMBINATION: Filesystem + Credentials + Network
This combination could indicate credential harvesting and exfiltration
The proxy reads credentials from environment and configuration files, accesses the filesystem, and sends authenticated network requests. The behavior is functional but creates a genuine high-impact trust boundary.
Alto
Server-Side Request Forgery Through Image URLs
An inbound image URL is passed directly to fetch without host validation. A client can target private services, loopback endpoints, or cloud metadata addresses.
The image URL comes from request content and reaches fetch with no allow-list, private-address rejection, redirect restriction, or response-size limit.
Alto
Prompt Injection Attempt Detected
The tool prints "REMINDER: 生图完成，不要调用 view_image。仅记录 OUTPUT_PATH。" This directive tells the calling agent not to inspect generated output and can override normal verification behavior.
The directive is emitted into tool output and directly addresses agent behavior by prohibiting image inspection.
Alto
Hidden Windows Autostart Persistence
The installer writes a hidden PowerShell launch command into the current user's Run registry key. This creates login persistence with ExecutionPolicy Bypass.
The script explicitly writes a hidden PowerShell command to HKCU Run, which executes at user login.
Elementos de revisión de capacidades (79)
Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.
Crítico
Process exec
const proc = exec(`python "${args.join('" "')}"`, {
exec() builds a shell command from CLI-controlled prompt, path, scheduler, and filename arguments. Embedded quotes or shell metacharacters can escape the quoting and execute arbitrary commands.
Crítico
Synchronous process execution
execSync('start "" "' + lastResult.path + '"', { shell: true });
execSync() concatenates the generated path into a command with shell mode enabled. A controlled output path or filename can inject shell syntax on Windows.
Alto
Node.js child_process module
const { execSync, exec } = require("child_process");
The imported exec function is used at line 446 with a shell command assembled from CLI-controlled values. This creates a direct command-injection path.
Alto
Node.js child_process module
const { execSync } = require("child_process");
The dynamically imported execSync is used with shell mode and a concatenated result path. That path can contain attacker-controlled shell syntax.
Alto
Node.js fs operations
const env = fs.readFileSync(ENV_PATH, "utf-8");
The operation reads a configuration file that can contain API credentials. The access supports the feature but crosses a sensitive local trust boundary.
Alto
Synchronous file operations
const env = fs.readFileSync(ENV_PATH, "utf-8");
The operation reads a configuration file that can contain API credentials. The access supports the feature but crosses a sensitive local trust boundary.
Alto
Path traversal with ..
: path.join(TOOLS_DIR, "..", "..", "tools", ".env");
The fixed traversal reaches a shared ../../tools directory to read .env or config.json. This can expose credentials outside the deployed proxy directory.
Alto
Generic API/secret keys
// .env 中的 SILICONFLOW_API_KEY 优先级最高(与代理共用同一份 key)
Runtime code locates and reads an API key for authenticated cloud or upstream requests. The credential access is intended but creates a real secret-handling risk.
Alto
Generic API/secret keys
const envKey = loadEnvKey("SILICONFLOW_API_KEY");
Runtime code locates and reads an API key for authenticated cloud or upstream requests. The credential access is intended but creates a real secret-handling risk.
Alto
PowerShell invocation
$cmd = 'powershell.exe -WindowStyle Hidden -ExecutionPolicy Bypass -File "{0}"' -f (Join-Path $here
The line constructs or instructs execution of a PowerShell command with ExecutionPolicy Bypass. The autostart form also launches a hidden process, increasing persistence risk.
Alto
Fetch API call
const resp = await fetch(imageData);
fetch() receives imageData from an inbound request without scheme, host, redirect, or private-range validation. A client can make the proxy request internal or metadata URLs.
Alto
HTTP client library
const upstreamReq = transport.request(options, (upstreamRes) => {
The proxy forwards client-controlled request paths and bodies while adding the stored DeepSeek credential. This authenticated network capability is security-sensitive.
Alto
Net server creation (opens port)
const s = net.createServer();
The port check creates a listener on all interfaces, and the production HTTP server later uses the same unrestricted listen behavior. The service has no client authentication.
Alto
Node.js fs operations
const env = fs.readFileSync(ENV_PATH, 'utf-8');
The operation reads a configuration file that can contain API credentials. The access supports the feature but crosses a sensitive local trust boundary.
Alto
Node.js fs operations
const env = fs.readFileSync(ENV_PATH, 'utf-8');
The operation reads a configuration file that can contain API credentials. The access supports the feature but crosses a sensitive local trust boundary.
Alto
Node.js fs operations
const toml = fs.readFileSync(tomlPath, 'utf-8');
The operation reads a configuration file that can contain API credentials. The access supports the feature but crosses a sensitive local trust boundary.
Alto
Synchronous file operations
const env = fs.readFileSync(ENV_PATH, 'utf-8');
The operation reads a configuration file that can contain API credentials. The access supports the feature but crosses a sensitive local trust boundary.
Alto
Synchronous file operations
const env = fs.readFileSync(ENV_PATH, 'utf-8');
The operation reads a configuration file that can contain API credentials. The access supports the feature but crosses a sensitive local trust boundary.
Alto
Synchronous file operations
const toml = fs.readFileSync(tomlPath, 'utf-8');
The operation reads a configuration file that can contain API credentials. The access supports the feature but crosses a sensitive local trust boundary.
Alto
Path traversal with ..
const ENV_PATH = fs.existsSync(LOCAL_ENV_PATH) ? LOCAL_ENV_PATH : path.join(__dirname, '..', '..', '
The fixed traversal reaches a shared ../../tools directory to read .env or config.json. This can expose credentials outside the deployed proxy directory.
Alto
Path traversal with ..
const CONFIG_PATH = path.join(__dirname, '..', '..', 'tools', 'config.json');
The fixed traversal reaches a shared ../../tools directory to read .env or config.json. This can expose credentials outside the deployed proxy directory.
Alto
Environment variable access (dot notation)
if (process.env.DEEPSEEK_API_KEY) {
The line reads DEEPSEEK_API_KEY from the process environment for authenticated forwarding. This is direct access to a secret.
Alto
Environment variable access (dot notation)
cachedDeepSeekKey = process.env.DEEPSEEK_API_KEY.trim();
The line reads DEEPSEEK_API_KEY from the process environment for authenticated forwarding. This is direct access to a secret.
Alto
Environment variable object
if (process.env.DEEPSEEK_API_KEY) {
The line reads DEEPSEEK_API_KEY from the process environment for authenticated forwarding. This is direct access to a secret.
Alto
Environment variable object
cachedDeepSeekKey = process.env.DEEPSEEK_API_KEY.trim();
The line reads DEEPSEEK_API_KEY from the process environment for authenticated forwarding. This is direct access to a secret.
Alto
Generic API/secret keys
const m = env.match(/SILICONFLOW_API_KEY\s*=\s*(.+)/);
Runtime code locates and reads an API key for authenticated cloud or upstream requests. The credential access is intended but creates a real secret-handling risk.
Alto
Generic API/secret keys
// 优先级: 环境变量 DEEPSEEK_API_KEY → tools/.env → .codex/config.toml
Runtime code locates and reads an API key for authenticated cloud or upstream requests. The credential access is intended but creates a real secret-handling risk.
Alto
Generic API/secret keys
if (process.env.DEEPSEEK_API_KEY) {
Runtime code locates and reads an API key for authenticated cloud or upstream requests. The credential access is intended but creates a real secret-handling risk.
Alto
Generic API/secret keys
cachedDeepSeekKey = process.env.DEEPSEEK_API_KEY.trim();
Runtime code locates and reads an API key for authenticated cloud or upstream requests. The credential access is intended but creates a real secret-handling risk.
Alto
Generic API/secret keys
const m = env.match(/DEEPSEEK_API_KEY\s*=\s*(.+)/);
Runtime code locates and reads an API key for authenticated cloud or upstream requests. The credential access is intended but creates a real secret-handling risk.
Alto
PowerShell invocation
# Windows: powershell -ExecutionPolicy Bypass -File start-proxy.ps1
The line constructs or instructs execution of a PowerShell command with ExecutionPolicy Bypass. The autostart form also launches a hidden process, increasing persistence risk.
Alto
PowerShell invocation
powershell -ExecutionPolicy Bypass -File install-autostart.ps1
The line constructs or instructs execution of a PowerShell command with ExecutionPolicy Bypass. The autostart form also launches a hidden process, increasing persistence risk.
Alto
Hidden file in home directory
4. 修改 `~/.codex/config.toml`,让 Codex 走代理(详见 `SKILL.md` 或
The instructions direct modification of the user's ~/.codex/config.toml to route model traffic through this proxy. Changing a hidden home configuration file is security-sensitive.
Alto
Hidden file in home directory
修改 `~/.codex/config.toml`:
The instructions direct modification of the user's ~/.codex/config.toml to route model traffic through this proxy. Changing a hidden home configuration file is security-sensitive.
Alto
PowerShell invocation
# 或 powershell -ExecutionPolicy Bypass -File start-proxy.ps1 # Windows
The line constructs or instructs execution of a PowerShell command with ExecutionPolicy Bypass. The autostart form also launches a hidden process, increasing persistence risk.
Alto
PowerShell invocation
powershell -ExecutionPolicy Bypass -File install-autostart.ps1
The line constructs or instructs execution of a PowerShell command with ExecutionPolicy Bypass. The autostart form also launches a hidden process, increasing persistence risk.
Alto
Hidden file in home directory
修改 `~/.codex/config.toml`(Windows 为 `%USERPROFILE%\.codex\config.toml`):
The instructions direct modification of the user's ~/.codex/config.toml to route model traffic through this proxy. Changing a hidden home configuration file is security-sensitive.
Medio
Node.js fs operations
const cfg = JSON.parse(fs.readFileSync(CONFIG_PATH, "utf-8"));
The operation performs real local configuration, output, or log file access. Paths are mostly application-scoped, but the filesystem capability is present.
Medio
Node.js fs operations
if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
The operation performs real local configuration, output, or log file access. Paths are mostly application-scoped, but the filesystem capability is present.
Medio
Node.js fs operations
fs.writeFileSync(CONFIG_PATH, JSON.stringify(config, null, 2), "utf-8");
The operation performs real local configuration, output, or log file access. Paths are mostly application-scoped, but the filesystem capability is present.
Medio
Node.js fs operations
fs.mkdirSync(opts.output, { recursive: true });
The operation performs real local configuration, output, or log file access. Paths are mostly application-scoped, but the filesystem capability is present.
Medio
Synchronous file operations
const cfg = JSON.parse(fs.readFileSync(CONFIG_PATH, "utf-8"));
The operation performs real local configuration, output, or log file access. Paths are mostly application-scoped, but the filesystem capability is present.
Medio
Synchronous file operations
fs.writeFileSync(CONFIG_PATH, JSON.stringify(config, null, 2), "utf-8");
The operation performs real local configuration, output, or log file access. Paths are mostly application-scoped, but the filesystem capability is present.
Medio
File stream creation
const file = fs.createWriteStream(dest);
The code creates an output stream at a path derived from CLI output and filename options. This is expected image output but permits caller-selected filesystem writes.
Medio
HTTP/HTTPS request
const req = https.request(options, (res) => {
The request sends the image, prompt, and SiliconFlow API credential to the configured cloud vision service. This is disclosed functionality but exposes user data externally.
Medio
HTTP client library
const req = https.request(options, (res) => {
The request sends the image, prompt, and SiliconFlow API credential to the configured cloud vision service. This is disclosed functionality but exposes user data externally.
Medio
Hardcoded IP address
// 与 server.listen 保持一致(0.0.0.0),否则端口占用检测失效
The comment accurately states that server.listen uses 0.0.0.0. The proxy therefore accepts connections on every network interface rather than only loopback.
Medio
Node.js fs operations
const cfg = JSON.parse(fs.readFileSync(CONFIG_PATH, 'utf-8'));
The operation performs real local configuration, output, or log file access. Paths are mostly application-scoped, but the filesystem capability is present.
Medio
Node.js fs operations
fs.appendFileSync(LOG_FILE, line + '\n');
The operation performs real local configuration, output, or log file access. Paths are mostly application-scoped, but the filesystem capability is present.
Medio
Node.js fs operations
if (fs.existsSync(bak)) fs.unlinkSync(bak);
The operation performs real local configuration, output, or log file access. Paths are mostly application-scoped, but the filesystem capability is present.
Medio
Node.js fs operations
fs.renameSync(LOG_FILE, bak);
The operation performs real local configuration, output, or log file access. Paths are mostly application-scoped, but the filesystem capability is present.
Medio
Node.js fs operations
try { fs.mkdirSync(LOG_DIR, { recursive: true }); } catch (_) {}
The operation performs real local configuration, output, or log file access. Paths are mostly application-scoped, but the filesystem capability is present.
Medio
Synchronous file operations
const cfg = JSON.parse(fs.readFileSync(CONFIG_PATH, 'utf-8'));
The operation performs real local configuration, output, or log file access. Paths are mostly application-scoped, but the filesystem capability is present.
Medio
Synchronous file operations
fs.appendFileSync(LOG_FILE, line + '\n');
The operation performs real local configuration, output, or log file access. Paths are mostly application-scoped, but the filesystem capability is present.
Medio
nohup (background persistent process)
nohup "$node" "$proxy_js" >>"$here/outputs/proxy.log" 2>&1 &
The script starts the proxy as a detached background process and redirects logs to disk. This is intentional but creates a persistent local service.
Medio
Hidden file access
2. 把 `assets/.env.template` 重命名为 `.env` 并填写:
The skill documentation directs creation or modification of .env or Codex configuration files. These files contain credentials or alter the model traffic route.
Medio
Hidden file access
4. 修改 `~/.codex/config.toml`,让 Codex 走代理(详见 `SKILL.md` 或
The skill documentation directs creation or modification of .env or Codex configuration files. These files contain credentials or alter the model traffic route.
Medio
Hidden file access
修改 `~/.codex/config.toml`:
The skill documentation directs creation or modification of .env or Codex configuration files. These files contain credentials or alter the model traffic route.
Medio
Hidden file access
├── .env ← 从 assets/.env.template 复制并填写
The skill documentation directs creation or modification of .env or Codex configuration files. These files contain credentials or alter the model traffic route.
Medio
Hidden file access
修改 `~/.codex/config.toml`(Windows 为 `%USERPROFILE%\.codex\config.toml`):
The skill documentation directs creation or modification of .env or Codex configuration files. These files contain credentials or alter the model traffic route.
Bajo
HTTP/HTTPS request
const req = https.request({
The code sends the image prompt and an API credential to the documented SiliconFlow service. This is intended cloud behavior but is real external data transmission.
Bajo
HTTP client library
const req = https.request({
The code sends the image prompt and an API credential to the documented SiliconFlow service. This is intended cloud behavior but is real external data transmission.
Bajo
Node.js fs stat operations
const ENV_PATH = fs.existsSync(path.join(TOOLS_DIR, ".env"))
The code performs a real existence or metadata check on local configuration, output, or log paths. The operation is limited but confirms filesystem access.
Bajo
Node.js fs stat operations
if (fs.existsSync(ENV_PATH)) {
The code performs a real existence or metadata check on local configuration, output, or log paths. The operation is limited but confirms filesystem access.
Bajo
Node.js fs stat operations
if (fs.existsSync(CONFIG_PATH)) {
The code performs a real existence or metadata check on local configuration, output, or log paths. The operation is limited but confirms filesystem access.
Bajo
Node.js fs stat operations
if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
The code performs a real existence or metadata check on local configuration, output, or log paths. The operation is limited but confirms filesystem access.
Bajo
Node.js fs stat operations
if (!fs.existsSync(opts.output)) {
The code performs a real existence or metadata check on local configuration, output, or log paths. The operation is limited but confirms filesystem access.
Bajo
Environment variable access (bracket notation)
if (process.env[name]) return process.env[name].trim();
The generic environment lookup is used to retrieve SILICONFLOW_API_KEY. This is intentional credential access but remains security-sensitive.
Bajo
Environment variable object
if (process.env[name]) return process.env[name].trim();
The generic environment lookup is used to retrieve SILICONFLOW_API_KEY. This is intentional credential access but remains security-sensitive.
Bajo
HTTP/HTTPS request
const req = http.request(options, (res) => {
The request sends image data and prompts to the configured Ollama endpoint. It defaults to loopback but remains a real configurable network operation.
Bajo
HTTP/HTTPS get
const req = https.get('https://api.siliconflow.cn/v1/models', {
The code makes an authenticated availability request to the documented SiliconFlow API. This is intended but remains a real external network operation.
Bajo
HTTP client library
const req = http.request(options, (res) => {
The request sends image data and prompts to the configured Ollama endpoint. It defaults to loopback but remains a real configurable network operation.
Bajo
Node.js fs stat operations
const ENV_PATH = fs.existsSync(LOCAL_ENV_PATH) ? LOCAL_ENV_PATH : path.join(__dirname, '..', '..', '
The code performs a real existence or metadata check on local configuration, output, or log paths. The operation is limited but confirms filesystem access.
Bajo
Node.js fs stat operations
if (fs.existsSync(ENV_PATH)) {
The code performs a real existence or metadata check on local configuration, output, or log paths. The operation is limited but confirms filesystem access.
Bajo
Node.js fs stat operations
if (fs.existsSync(CONFIG_PATH)) {
The code performs a real existence or metadata check on local configuration, output, or log paths. The operation is limited but confirms filesystem access.
Bajo
Node.js fs stat operations
if (fs.existsSync(ENV_PATH)) {
The code performs a real existence or metadata check on local configuration, output, or log paths. The operation is limited but confirms filesystem access.
Bajo
Node.js fs stat operations
if (fs.existsSync(tomlPath)) {
The code performs a real existence or metadata check on local configuration, output, or log paths. The operation is limited but confirms filesystem access.
Bajo
Node.js fs stat operations
if (fs.existsSync(LOG_FILE) && fs.statSync(LOG_FILE).size > LOG_MAX_SIZE) {
The code performs a real existence or metadata check on local configuration, output, or log paths. The operation is limited but confirms filesystem access.
Bajo
Node.js fs stat operations
if (fs.existsSync(bak)) fs.unlinkSync(bak);
The code performs a real existence or metadata check on local configuration, output, or log paths. The operation is limited but confirms filesystem access.
Factores de riesgo
📁 Acceso al sistema de archivos (50)
.gitignore:12 assets/image-gen.js:45 assets/image-gen.js:59 assets/image-gen.js:80 assets/image-gen.js:81 assets/image-gen.js:553 assets/image-gen.js:37 assets/image-gen.js:44 assets/image-gen.js:57 assets/image-gen.js:80 assets/image-gen.js:552 assets/image-gen.js:45 assets/image-gen.js:59 assets/image-gen.js:81 assets/image-gen.js:396 assets/image-gen.js:33 assets/image-gen.js:39 assets/image-gen.js:36 assets/ocr-proxy.js:93 assets/ocr-proxy.js:98 assets/ocr-proxy.js:121 assets/ocr-proxy.js:127 assets/ocr-proxy.js:257 assets/ocr-proxy.js:265 assets/ocr-proxy.js:266 assets/ocr-proxy.js:729 assets/ocr-proxy.js:85 assets/ocr-proxy.js:92 assets/ocr-proxy.js:97 assets/ocr-proxy.js:120 assets/ocr-proxy.js:126 assets/ocr-proxy.js:263 assets/ocr-proxy.js:265 assets/ocr-proxy.js:93 assets/ocr-proxy.js:98 assets/ocr-proxy.js:121 assets/ocr-proxy.js:127 assets/ocr-proxy.js:257 assets/ocr-proxy.js:85 assets/ocr-proxy.js:86 assets/ocr-proxy.js:83 assets/ocr-proxy.js:109 assets/start-proxy.sh:7 assets/start-proxy.sh:14 README.md:23 README.md:41 README.md:23 README.md:30 README.md:41 references/architecture.md:63
🌐 Acceso a red (34)
assets/.env.template:6 assets/.env.template:9 assets/.env.template:18 assets/.env.template:18 assets/image-gen.js:361 assets/image-gen.js:361 assets/ocr-proxy.js:303 assets/ocr-proxy.js:164 assets/ocr-proxy.js:213 assets/ocr-proxy.js:238 assets/ocr-proxy.js:164 assets/ocr-proxy.js:213 assets/ocr-proxy.js:639 assets/ocr-proxy.js:527 assets/ocr-proxy.js:74 assets/ocr-proxy.js:80 assets/ocr-proxy.js:238 assets/ocr-proxy.js:16 assets/ocr-proxy.js:80 assets/ocr-proxy.js:530 assets/start-proxy.ps1:16 references/model-guide.md:18 references/multi-agent.md:34 references/multi-agent.md:43 references/multi-agent.md:72 references/multi-agent.md:81 references/multi-agent.md:34 references/multi-agent.md:43 references/multi-agent.md:72 references/multi-agent.md:81 scripts/check_env.py:27 SKILL.md:69 SKILL.md:96 SKILL.md:96
🔑 Variables de entorno (42)
assets/.env.template:7 assets/.env.template:11 assets/image-gen.js:43 assets/image-gen.js:43 assets/image-gen.js:60 assets/image-gen.js:61 assets/ocr-proxy.js:20 assets/ocr-proxy.js:21 assets/ocr-proxy.js:22 assets/ocr-proxy.js:24 assets/ocr-proxy.js:80 assets/ocr-proxy.js:81 assets/ocr-proxy.js:116 assets/ocr-proxy.js:117 assets/ocr-proxy.js:125 assets/ocr-proxy.js:20 assets/ocr-proxy.js:21 assets/ocr-proxy.js:22 assets/ocr-proxy.js:24 assets/ocr-proxy.js:80 assets/ocr-proxy.js:81 assets/ocr-proxy.js:116 assets/ocr-proxy.js:117 assets/ocr-proxy.js:125 assets/ocr-proxy.js:94 assets/ocr-proxy.js:109 assets/ocr-proxy.js:116 assets/ocr-proxy.js:117 assets/ocr-proxy.js:122 README.md:31 README.md:32 references/multi-agent.md:17 references/multi-agent.md:73 references/multi-agent.md:82 references/troubleshooting.md:14 references/troubleshooting.md:19 references/troubleshooting.md:29 references/troubleshooting.md:44 scripts/check_env.py:67 scripts/check_env.py:86 SKILL.md:60 SKILL.md:61
⚡ Contiene scripts (1)
⚙️ Comandos externos (50)
assets/image-gen.js:24 assets/image-gen.js:595 assets/image-gen.js:446 assets/image-gen.js:90 assets/image-gen.js:99 assets/image-gen.js:596 assets/image-gen.js:65 assets/image-gen.js:82 assets/image-gen.js:129 assets/image-gen.js:135 assets/image-gen.js:151 assets/image-gen.js:172 assets/image-gen.js:174 assets/image-gen.js:176 assets/image-gen.js:186 assets/image-gen.js:198 assets/image-gen.js:208 assets/image-gen.js:209 assets/image-gen.js:210 assets/image-gen.js:211 assets/image-gen.js:212 assets/image-gen.js:213 assets/image-gen.js:216 assets/image-gen.js:347 assets/image-gen.js:367 assets/image-gen.js:413 assets/image-gen.js:446 assets/image-gen.js:473 assets/image-gen.js:474 assets/image-gen.js:477 assets/image-gen.js:545 assets/image-gen.js:546 assets/image-gen.js:547 assets/image-gen.js:548 assets/image-gen.js:550 assets/image-gen.js:567 assets/image-gen.js:581 assets/image-gen.js:582 assets/image-gen.js:583 assets/image-gen.js:584 assets/image-gen.js:585 assets/image-gen.js:587 assets/image-gen.js:603 assets/image-gen.js:609 assets/install-autostart.ps1:2 assets/install-autostart.ps1:7 assets/install-autostart.ps1:8 assets/ocr-proxy.js:254 assets/start-proxy.ps1:38 assets/start-proxy.ps1:34
Patrones detectados
[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
Auditado por: codex
Compartir y citar este informe
Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.
Copiar enlace del informe
https://skillstore.io/skills/lightlw-deepseek-vision-bridge/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportInsignia Markdown
[](https://skillstore.io/skills/lightlw-deepseek-vision-bridge?utm_source=security_passport_badge)Insignia HTML
<a href="https://skillstore.io/skills/lightlw-deepseek-vision-bridge?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/lightlw-deepseek-vision-bridge/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Tarjeta para insertar
<iframe src="https://skillstore.io/embed/skills/lightlw-deepseek-vision-bridge.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citas académicas (APA · BibTeX · CFF)
Cita APA
lightlw. (2026). deepseek-vision-bridge security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/lightlw-deepseek-vision-bridge/audits/1Cita BibTeX
@techreport{lightlw-lightlw-deepseek-vision-bridge-2026,
author = {lightlw},
title = {deepseek-vision-bridge security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/lightlw-deepseek-vision-bridge/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "deepseek-vision-bridge security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "lightlw"
date-released: "2026-08-01"
url: "https://skillstore.io/skills/lightlw-deepseek-vision-bridge/audits/1"
identifiers:
- type: other
value: "skillstore:lightlw-deepseek-vision-bridge:audit:1"
description: "Skillstore immutable audit report identifier"
Puntuación de Skillstore
Por qué esta puntuación Confianza de la evidencia: Medio 95
Arquitectura
85
Mantenibilidad
87
Contenido
65
Comunidad
83
Cumplimiento de la especificación
Lo que puedes crear
Enable Vision for Codex
Route pasted images through OCR or a vision model before sending text to DeepSeek.
Build a Local Vision Workflow
Use Ollama and OCR to keep image analysis on the local machine.
Diagnose Proxy Failures
Check ports, credentials, model availability, logs, and upstream connectivity.
Prueba estos prompts
Check My Environment
Assess my system for DeepSeek Vision Bridge. Report missing requirements and do not change files.
Configure OCR Only
Plan an OCR-only setup for Codex and DeepSeek. Keep images local and request approval before editing configuration.
Add Vision Fallbacks
Configure SiliconFlow vision with Ollama fallback. Explain data destinations, credential requirements, and each proposed file change.
Harden the Proxy
Audit and harden the bridge. Bind loopback, add client authentication, restrict outbound URLs, remove shell execution, and verify behavior.
Mejores prácticas
- Bind the proxy to loopback and require a separate client authentication token.
- Store API keys in a restricted local file and never print complete values.
- Review every configuration change and test OCR, cloud vision, and fallback routes separately.
Evitar
- Do not expose the proxy port to a local network or the public internet.
- Do not pass untrusted text through shell command construction.
- Do not enable cloud processing when images contain sensitive data.
Preguntas frecuentes
Does this make DeepSeek a native vision model?
No. The proxy converts images into text before sending the request to DeepSeek.
Can image analysis remain offline?
Yes. Use Tesseract for text and Ollama for visual understanding without SiliconFlow.
Which cloud service is used for vision?
The included configuration uses SiliconFlow with a Qwen vision model.
Does local image generation work immediately?
No. The referenced Python generation backends are not included and require separate installation.
Which API formats can the proxy process?
It handles OpenAI Responses and Chat Completions image content. Anthropic compatibility is documented as requiring testing.
Is the default proxy configuration secure?
No. It listens on all interfaces without client authentication and requires hardening before use.
Detalles del desarrollador
Autor
lightlwLicencia
MIT
Revisión de Skillstore
r1
Aviso de versión
El autor no declaró una versión.
Repositorio
https://github.com/lightlw/deepseek-vision-bridge/tree/932c9204cd21267e9cdcd54cb5a5fd135ff258f6/Ref.
cf94fd95ce2041463fbdf1085397dc8302d22a82
Actualidad del mantenimiento
1/8/2026
Uso
0 descargas · 0 vistas