Skills fiftyone-dataset-import

📦

fiftyone-dataset-import

Name: fiftyone-dataset-import
Author: AdonaiVera

Content revision r1 High Risk ⚙️ External commands🌐 Network access📁 Filesystem access

Import Vision Datasets into FiftyOne

Dataset imports often fail when media, annotations, and multimodal folders use different formats. This skill guides scanning, detection, package setup, import, grouping, and validation in FiftyOne.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "fiftyone-dataset-import" from https://skillstore.io/skills/adonaivera-fiftyone-dataset-import.md and its manifest at https://skillstore.io/api/skills/adonaivera-fiftyone-dataset-import/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/adonaivera-fiftyone-dataset-import.md Signed manifest GET /api/skills/adonaivera-fiftyone-dataset-import/manifest Signed lockfile GET /api/skills/adonaivera-fiftyone-dataset-import/lockfile

Test it

Using "fiftyone-dataset-import". Import a COCO image dataset from my local folder.

Expected outcome:

Scan summary lists image count, annotation file, and detected COCO structure.
Proposed import settings include dataset name, label field, and source paths.
The assistant asks for confirmation before creating the dataset.

Using "fiftyone-dataset-import". Load an autonomous driving dataset with cameras and LiDAR.

Expected outcome:

Detected slices include front camera, side cameras, and LiDAR.
Required packages and point cloud conversion steps are listed.
Validation compares expected groups, samples, and label fields.

Using "fiftyone-dataset-import". Troubleshoot a failed FiftyOne import.

Expected outcome:

The response checks paths, supported extensions, label format, and existing dataset names.
It suggests a smaller test import before retrying the full dataset.

Security Audit

High Risk

v8 • 7/5/2026 Open versioned report

Most static hits are Markdown backticks, code fences, examples, or benign FiftyOne references. Confirmed issues are limited to package installation guidance and Python import checks that can execute third-party code. A high-risk semantic issue remains because the skill recommends pickle.load on dataset files.

Files scanned

1,089

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

High

SKILL.md:177 SKILL.md:623-624 SKILL.md:649-650 SKILL.md:676-677 SKILL.md:700-701

Unsafe Pickle Loading From Dataset Files

The skill shows pickle.load on annotation and LiDAR files from dataset paths. Malicious pickle files can execute code during loading.

The cited examples directly load pickle data from dataset files. Python pickle is unsafe for untrusted input and can execute code when deserialized.

Capability review items (18)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

SKILL.md:65

Ruby/shell backtick execution

| PandaSet | `pandaset` | `pip install "git+https://github.com/scaleapi/pandaset-devkit.git#subdirec

The skill recommends pip installation of third-party packages. Package installation can execute setup code and modify the user environment.

Medium

SKILL.md:66

Ruby/shell backtick execution

| nuScenes | `nuscenes-devkit` | `pip install nuscenes-devkit` |

The skill recommends pip installation of third-party packages. Package installation can execute setup code and modify the user environment.

Medium

SKILL.md:68

Ruby/shell backtick execution

| Argoverse 2 | `av2` | `pip install av2` |

The skill recommends pip installation of third-party packages. Package installation can execute setup code and modify the user environment.

Medium

SKILL.md:69

Ruby/shell backtick execution

| KITTI 3D | `pykitti` | `pip install pykitti` |

The skill recommends pip installation of third-party packages. Package installation can execute setup code and modify the user environment.

Medium

SKILL.md:70

Ruby/shell backtick execution

| Lyft L5 | `l5kit` | `pip install l5kit` |

The skill recommends pip installation of third-party packages. Package installation can execute setup code and modify the user environment.

Medium

SKILL.md:77

Ruby/shell backtick execution

| Point cloud conversion to PCD | `open3d` | `pip install open3d` |

The skill recommends pip installation of third-party packages. Package installation can execute setup code and modify the user environment.

Medium

SKILL.md:78

Ruby/shell backtick execution

| Point cloud processing | `pyntcloud` | `pip install pyntcloud` |

The skill recommends pip installation of third-party packages. Package installation can execute setup code and modify the user environment.

Medium

SKILL.md:79

Ruby/shell backtick execution

| LAS/LAZ point clouds | `laspy` | `pip install laspy` |

The skill recommends pip installation of third-party packages. Package installation can execute setup code and modify the user environment.

Medium

SKILL.md:118-131

Ruby/shell backtick execution

2. **Test import** in Python: `python -c "from <package> import ..."`

The skill recommends running a Python import check for a newly installed package. Importing untrusted package code can execute local code as a side effect.

Medium

SKILL.md:533-537

Ruby/shell backtick execution

**Note:** Install open3d if needed: `pip install open3d`

The skill recommends pip installation of third-party packages. Package installation can execute setup code and modify the user environment.

Low

SKILL.md:65

Hardcoded URL

| PandaSet | `pandaset` | `pip install "git+https://github.com/scaleapi/pandaset-devkit.git#subdirec

The URL is used for remote package installation or cloning. Fetching and installing code from external repositories introduces supply-chain risk.

Low

SKILL.md:91

Hardcoded URL

pip install "git+https://github.com/<org>/<repo>.git"

The URL is used for remote package installation or cloning. Fetching and installing code from external repositories introduces supply-chain risk.

Low

SKILL.md:94

Hardcoded URL

pip install "git+https://github.com/<org>/<repo>.git#subdirectory=python"

The URL is used for remote package installation or cloning. Fetching and installing code from external repositories introduces supply-chain risk.

Low

SKILL.md:97

Hardcoded URL

pip install "git+https://github.com/<org>/<repo>.git@v1.0.0"

The URL is used for remote package installation or cloning. Fetching and installing code from external repositories introduces supply-chain risk.

Low

SKILL.md:102

Hardcoded URL

git clone https://github.com/<org>/<repo>.git

The URL is used for remote package installation or cloning. Fetching and installing code from external repositories introduces supply-chain risk.

Low

SKILL.md:247

Hardcoded URL

pip install "git+https://github.com/scaleapi/pandaset-devkit.git#subdirectory=python"

The URL is used for remote package installation or cloning. Fetching and installing code from external repositories introduces supply-chain risk.

Low

SKILL.md:261

Hardcoded URL

pip install "git+https://github.com/<org>/<repo>.git#subdirectory=python"

The URL is used for remote package installation or cloning. Fetching and installing code from external repositories introduces supply-chain risk.

Low

SKILL.md:264

Hardcoded URL

git clone https://github.com/<org>/<repo>.git && cd <repo> && pip install .

The URL is used for remote package installation or cloning. Fetching and installing code from external repositories introduces supply-chain risk.

Risk Factors

⚙️ External commands (155)

SKILL.md:27 SKILL.md:28 SKILL.md:36-40 SKILL.md:40-48 SKILL.md:48 SKILL.md:55-65 SKILL.md:65 SKILL.md:66 SKILL.md:67-68 SKILL.md:68 SKILL.md:69 SKILL.md:70 SKILL.md:71-77 SKILL.md:77 SKILL.md:78 SKILL.md:79 SKILL.md:84-86 SKILL.md:86-89 SKILL.md:89-98 SKILL.md:98-101 SKILL.md:101-105 SKILL.md:105-110 SKILL.md:110 SKILL.md:111 SKILL.md:117-118 SKILL.md:118-131 SKILL.md:131-133 SKILL.md:133-136 SKILL.md:136-151 SKILL.md:151-163 SKILL.md:163-172 SKILL.md:172-178 SKILL.md:178-186 SKILL.md:186 SKILL.md:187 SKILL.md:188 SKILL.md:189 SKILL.md:197 SKILL.md:198 SKILL.md:199 SKILL.md:200 SKILL.md:201 SKILL.md:202 SKILL.md:203 SKILL.md:204-205 SKILL.md:205 SKILL.md:206 SKILL.md:207 SKILL.md:208 SKILL.md:214 SKILL.md:215 SKILL.md:216 SKILL.md:217 SKILL.md:218 SKILL.md:219 SKILL.md:225-230 SKILL.md:230-237 SKILL.md:237-243 SKILL.md:243-244 SKILL.md:244-253 SKILL.md:253-256 SKILL.md:256-265 SKILL.md:265-268 SKILL.md:268-270 SKILL.md:270-273 SKILL.md:273-275 SKILL.md:275-288 SKILL.md:288-297 SKILL.md:297-301 SKILL.md:301-309 SKILL.md:309-313 SKILL.md:313-318 SKILL.md:318-325 SKILL.md:325-360 SKILL.md:360-372 SKILL.md:372-375 SKILL.md:375-381 SKILL.md:381 SKILL.md:385-392 SKILL.md:392-396 SKILL.md:396-408 SKILL.md:408-414 SKILL.md:414-436 SKILL.md:436-442 SKILL.md:442-488 SKILL.md:488-497 SKILL.md:497-498 SKILL.md:498-504 SKILL.md:504 SKILL.md:506-531 SKILL.md:531-533 SKILL.md:533-537 SKILL.md:537-539 SKILL.md:539-555 SKILL.md:555-561 SKILL.md:561-565 SKILL.md:565-571 SKILL.md:571 SKILL.md:572 SKILL.md:573 SKILL.md:574 SKILL.md:575 SKILL.md:576 SKILL.md:580-690 SKILL.md:690-698 SKILL.md:698-703 SKILL.md:703-710 SKILL.md:710-721 SKILL.md:721-725 SKILL.md:725-731 SKILL.md:731-740 SKILL.md:740-745 SKILL.md:745-753 SKILL.md:753 SKILL.md:754 SKILL.md:755 SKILL.md:756 SKILL.md:762 SKILL.md:763 SKILL.md:764 SKILL.md:765 SKILL.md:766 SKILL.md:767 SKILL.md:768-769 SKILL.md:769 SKILL.md:770 SKILL.md:771-772 SKILL.md:772-773 SKILL.md:773-774 SKILL.md:774-775 SKILL.md:775-776 SKILL.md:776 SKILL.md:777 SKILL.md:778 SKILL.md:779 SKILL.md:780-786 SKILL.md:786-809 SKILL.md:809-813 SKILL.md:813-835 SKILL.md:835-839 SKILL.md:839-861 SKILL.md:861-867 SKILL.md:867-914 SKILL.md:914-918 SKILL.md:918-940 SKILL.md:940-944 SKILL.md:944-979 SKILL.md:979-988 SKILL.md:988-989 SKILL.md:989-991 SKILL.md:991-1006 SKILL.md:1006-1020 SKILL.md:1020-1035 SKILL.md:1035-1043 SKILL.md:174

🌐 Network access (13)

SKILL.md:65 SKILL.md:91 SKILL.md:94 SKILL.md:97 SKILL.md:102 SKILL.md:247 SKILL.md:261 SKILL.md:264 SKILL.md:1079 SKILL.md:1080 SKILL.md:1081 SKILL.md:1082 SKILL.md:1083

📁 Filesystem access (1)

SKILL.md:162

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/adonaivera-fiftyone-dataset-import/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/adonaivera-fiftyone-dataset-import/security.svg)](https://skillstore.io/skills/adonaivera-fiftyone-dataset-import?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/adonaivera-fiftyone-dataset-import?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/adonaivera-fiftyone-dataset-import/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/adonaivera-fiftyone-dataset-import.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

AdonaiVera. (2026). fiftyone-dataset-import security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/adonaivera-fiftyone-dataset-import/audits/8

BibTeX citation

@techreport{adonaivera-adonaivera-fiftyone-dataset-import-2026,
  author = {AdonaiVera},
  title = {fiftyone-dataset-import security audit report (audit version 8)},
  institution = {Skillstore},
  year = {2026},
  number = {8},
  url = {https://skillstore.io/skills/adonaivera-fiftyone-dataset-import/audits/8},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "fiftyone-dataset-import security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
  - name: "AdonaiVera"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/adonaivera-fiftyone-dataset-import/audits/8"
identifiers:
  - type: other
    value: "skillstore:adonaivera-fiftyone-dataset-import:audit:8"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Import Standard Detection Datasets

Load image datasets with COCO, YOLO, VOC, CVAT, or KITTI labels into a new FiftyOne dataset.

Create Multimodal Driving Datasets

Group camera images, LiDAR point clouds, and labels by scene for autonomous driving review.

Validate Dataset Migration Results

Compare imported sample counts, labels, groups, and slices against the source files before analysis.

Try These Prompts

Import a Simple Image Dataset

Scan my image dataset at [path], detect labels, propose a FiftyOne import plan, and wait for my confirmation.

Detect Unknown Dataset Format

Inspect [path], identify the media types and annotation format, then recommend the safest FiftyOne import settings.

Create Multimodal Groups

Analyze [path] for camera, LiDAR, and scene grouping patterns. Propose group slices and a validation checklist.

Plan a Custom Autonomous Driving Import

Build a FiftyOne import plan for [dataset name] at [path], including required packages, conversion steps, and label mapping.

Best Practices

Scan the folder and present findings before creating a dataset.
Ask for confirmation before installing packages or overwriting datasets.
Validate sample counts, labels, and groups after every import.

Avoid

Do not import before confirming detected formats with the user.
Do not flatten multimodal scenes that should stay grouped.
Do not load untrusted pickle files without a safe review process.

Frequently Asked Questions

Does this skill require FiftyOne?

Yes. It assumes FiftyOne, the FiftyOne MCP server, and the listed Voxel51 plugins are available.

Can it import YOLO and COCO datasets?

Yes. The skill includes detection and import guidance for YOLO, COCO, VOC, CVAT, KITTI, and other formats.

Can it handle point clouds?

Yes. It covers PCD, PLY, LAS, LAZ, and conversion guidance for other point cloud formats.

Will it install packages automatically?

The instructions require user confirmation before installing packages. Review package sources before approving.

Can it overwrite existing datasets?

It checks for existing dataset names and asks whether to overwrite, rename, or abort.

Is it safe for untrusted annotation files?

Use caution. The skill includes pickle examples, and pickle files can execute code when loaded.

Developer Details

Author

AdonaiVera

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/AdonaiVera/fiftyone-skills/tree/main/dataset-import/skills/fiftyone-dataset-import

Ref

6eec4a59f63ff83440a84c18d1aef79743bc714e

Maintenance freshness

7/18/2026

Usage

6 downloads · 378 views

File structure

📄 SKILL.md