Skills image-audit

📦

image-audit

Name: image-audit
Author: xiaowu89

v1.1.2 Content revision r1 High Risk 🌐 Network access📁 Filesystem access⚙️ External commands🔑 Env variables

Audit Images for Sensitive Content

Manual image review is slow and inconsistent. This skill compresses image batches, submits them to an MCP moderation service, and summarizes pass, blocked, and failed results.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "image-audit" from https://skillstore.io/skills/xiaowu89-image-audit.md and its manifest at https://skillstore.io/api/skills/xiaowu89-image-audit/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/xiaowu89-image-audit.md Signed manifest GET /api/skills/xiaowu89-image-audit/manifest Signed lockfile GET /api/skills/xiaowu89-image-audit/lockfile

Test it

Using "image-audit". Audit one confirmed image after approving the external upload.

Expected outcome:

Audit complete: product-front.jpg passed. The service returned no violation details.

Using "image-audit". Audit a folder containing three supported images.

Expected outcome:

banner.jpg: passed
profile.png: blocked, manual review required
scan.webp: failed, service timeout

Using "image-audit". Audit a batch with one unreadable file.

Expected outcome:

Processed four files: two passed, one blocked, and one failed during compression. The failed file was not uploaded.

Security Audit

High Risk

v1 • 7/28/2026 Open versioned report

Most static command and reconnaissance findings are Markdown or JavaScript syntax false positives. Confirmed risks include secret exposure, global package installation, external image transfer, unsafe value interpolation, and unbounded image processing.

Files scanned

294

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (4)

High

SKILL.md:64-69

Unescaped Values Embedded in Executable JavaScript

Image paths, the endpoint, and the API key replace single-quoted placeholders. A crafted value containing a quote can inject JavaScript into the heredoc.

The workflow explicitly requires direct placeholder replacement inside executable single-quoted JavaScript literals, with no escaping or structured argument passing.

High

SKILL.md:74-81

Unbounded Image Processing Can Exhaust Memory

The script processes every matching file, disables Sharp pixel limits, and retains compressed data twice. Large batches or decompression bombs can exhaust memory.

The code has no file-count or byte limit, sets limitInputPixels to false, and stores each data URL in both records and data_urls.

High

SKILL.md:79-91 SKILL.en.md:43-47 SKILL.en.md:83-98

Bulk Image Upload Without Explicit Transfer Consent

The workflow sends compressed local image contents to an external service. It does not require confirmation after naming the destination and selected files.

Both workflows direct the agent to encode local images and submit them externally, but neither requires informed confirmation immediately before transfer.

Medium

SKILL.md:28 SKILL.en.md:28

Localized Instructions Use Different Remote Endpoints

The Chinese and English files configure different hardcoded ModelScope endpoint identifiers. Users can send the same images to different service instances by language.

The endpoint strings visibly differ at the same configuration line in the two files, while both are presented as the nx-mcp-audit service.

Capability review items (16)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

SKILL.md:91

Fetch API call

if(data_urls.length>0){const r3=await fetch(MCP_URL,{method:'POST',headers:H,body:JSON.stringify({js

This request sends compressed local images and the API key to the configured remote MCP endpoint. The data transfer creates privacy and credential exposure risk.

High

SKILL.md:48

Hidden file in home directory

cat .mcp.json 2>/dev/null || cat ~/.mcp.json 2>/dev/null

The command reads the complete project or home MCP configuration, which can expose unrelated service credentials and endpoints to the agent transcript.

High

SKILL.md:53

Hidden file in home directory

- **有 Key**:帮用户创建 `~/.mcp.json`(用户家目录),全局和项目安装都通用

The skill directs the agent to create a persistent hidden configuration in the user's home directory. It gives no merge or overwrite protection.

High

SKILL.md:48

Hidden file access

cat .mcp.json 2>/dev/null || cat ~/.mcp.json 2>/dev/null

The command prints the complete hidden MCP configuration rather than parsing only this service entry. Other stored secrets can enter logs or model context.

High

SKILL.md:53

Hidden file access

- **有 Key**:帮用户创建 `~/.mcp.json`(用户家目录),全局和项目安装都通用

The instructions authorize writing a hidden home configuration without preserving existing entries. This can persist secrets or damage unrelated MCP configuration.

High

SKILL.md:37

Generic API/secret keys

查找顺序:项目根目录 → 用户家目录。提取 `url` → `MCP_URL`,`env.NX_API_KEY` → `API_KEY`。

The workflow explicitly extracts NX_API_KEY from project or home configuration. This moves a sensitive credential into agent-controlled processing.

High

SKILL.md:51

Generic API/secret keys

- 找到 → 记录 `url` 和 `NX_API_KEY`,继续步骤 2

The agent is told to record the extracted API key for later use. Recording secrets can expose them in model context or execution logs.

High

SKILL.md:60

Generic API/secret keys

替换 `PIC_DIR`、`MCP_URL`、`API_KEY` 后,heredoc 直接通过 stdin 喂给 node,**不写任何文件**:

The workflow substitutes the API key directly into an executable heredoc. This exposes the secret in generated command content and permits unsafe literal interpolation.

High

SKILL.md:69

Generic API/secret keys

const API_KEY='<从.mcp.json读取的NX_API_KEY>';

The actual API key is inserted into a JavaScript string literal. It can be retained in command transcripts and is not protected by environment-based secret handling.

High

SKILL.md:86

Generic API/secret keys

const H={'Content-Type':'application/json','Accept':'application/json, text/event-stream','Authoriza

The extracted secret is placed in an Authorization header for a configurable remote endpoint. Compromised configuration could disclose the credential.

High

SKILL.md:91

Generic API/secret keys

if(data_urls.length>0){const r3=await fetch(MCP_URL,{method:'POST',headers:H,body:JSON.stringify({js

The API key is sent in the request body together with local image data. The remote service receives the credential beyond the Authorization header.

Medium

SKILL.md:63

Shell command substitution

NODE_PATH=$(npm root -g) node -e "require('sharp')" 2>/dev/null || npm install -g sharp

This command resolves a global npm path and automatically installs an unpinned package globally. It changes the host environment and introduces supply-chain risk.

Low

SKILL.en.md:28

Hardcoded URL

"url": "https://mcp.api-inference.modelscope.net/274be9de7fd649/mcp"

The instructions configure a fixed external ModelScope MCP endpoint. Images submitted through this configuration leave the local environment.

Low

SKILL.md:87

Fetch API call

const r1=await fetch(MCP_URL,{method:'POST',headers:H,body:JSON.stringify({jsonrpc:'2.0',id:'1',meth

The script makes an outbound initialization request to the configured MCP endpoint. This is an intentional network side effect.

Low

SKILL.md:89

Fetch API call

await fetch(MCP_URL,{method:'POST',headers:H,body:JSON.stringify({jsonrpc:'2.0',method:'notification

The script makes a second outbound MCP notification request. This is an intentional network side effect.

Low

SKILL.md:28

Hardcoded URL

"url": "https://mcp.api-inference.modelscope.net/da16b3f65bdb4e/mcp",

The configuration contains a fixed external ModelScope MCP endpoint. The later workflow sends user image data to this destination.

Risk Factors

🌐 Network access (5)

SKILL.en.md:28 SKILL.md:87 SKILL.md:89 SKILL.md:91 SKILL.md:28

📁 Filesystem access (12)

SKILL.en.md:69 SKILL.en.md:69 SKILL.en.md:58 SKILL.md:74 SKILL.md:75 SKILL.md:78 SKILL.md:48 SKILL.md:53 SKILL.md:48 SKILL.md:53 SKILL.md:48 SKILL.md:63

⚙️ External commands (47)

🔑 Env variables (8)

SKILL.md:5 SKILL.md:30 SKILL.md:37 SKILL.md:51 SKILL.md:60 SKILL.md:69 SKILL.md:86 SKILL.md:91

Audited by: codex

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/xiaowu89-image-audit/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/xiaowu89-image-audit/security.svg)](https://skillstore.io/skills/xiaowu89-image-audit?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/xiaowu89-image-audit?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/xiaowu89-image-audit/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/xiaowu89-image-audit.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

xiaowu89. (2026). image-audit security audit report (audit version 1) [Author version 1.1.2]. Skillstore. https://skillstore.io/skills/xiaowu89-image-audit/audits/1

BibTeX citation

@techreport{xiaowu89-xiaowu89-image-audit-2026,
  author = {xiaowu89},
  title = {image-audit security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/xiaowu89-image-audit/audits/1},
  note = {Author version 1.1.2}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "image-audit security audit report (audit version 1)"
version: "1.1.2"
type: report
authors:
  - name: "xiaowu89"
date-released: "2026-07-28"
url: "https://skillstore.io/skills/xiaowu89-image-audit/audits/1"
identifiers:
  - type: other
    value: "skillstore:xiaowu89-image-audit:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

100

Maintainability

Content

Community

Spec Compliance

What You Can Build

Review User Uploads

Screen a controlled batch of uploaded images before publication and identify items needing human review.

Check Product Assets

Audit local product images before release and summarize blocked or failed files for remediation.

Triage Media Libraries

Create a first-pass moderation report for a legacy image collection before detailed manual inspection.

Try These Prompts

Audit One Image

Audit the image at [path]. Show the external destination and ask for confirmation before uploading it.

Audit a Folder

Find supported images in [folder]. Report the file count, request upload confirmation, then return a moderation table.

Review Selected Files

Audit only these files: [file list]. Use batches of [size], retry failures once, and separate blocked results from service errors.

Run a Constrained Audit

Audit [folder] with a maximum of [count] files and [bytes] total input. Stop on limits and provide a manual-review queue.

Best Practices

Confirm the destination and selected files immediately before external transfer.
Use small, bounded batches and enforce decoded-pixel and total-byte limits.
Treat blocked results as review signals and inspect failures separately.

Avoid

Do not print API keys or complete MCP configuration files.
Do not upload private images without informed user approval.
Do not treat automated moderation as a final legal or policy decision.

Frequently Asked Questions

What content can this skill detect?

The service reports adult, political, and violent content classifications.

Does processing remain local?

No. Compression is local, but compressed image data is sent to an external MCP service.

What setup is required?

You need Node.js 18 or later, Sharp, network access, the MCP service, and a valid API key.

Which image formats are supported?

The primary workflow lists PNG, JPEG, WebP, BMP, and TGA files.

Can it audit image URLs?

The English workflow supports URLs, but recommends downloading and submitting compressed data URLs.

Should blocked images be deleted automatically?

No. Review blocked images manually before removal because automated classifications can be incomplete or incorrect.

Developer Details

Author

xiaowu89

License

MIT

Author version

v1.1.2

Skillstore revision

Repository

https://github.com/xiaowu89/skill-function/tree/b9c6c84bbf3b234084a7537f7a8d4f063cfd9caa/plugins/image-audit/skills/image-audit

Ref

ae5a35fdd886e6d52f484f6cb34e617a736f0136

Maintenance freshness

7/28/2026

Usage

0 downloads · 1 views

File structure

📄 SKILL.en.md

📄 SKILL.md

image-audit

Install with my Agent

Agent-readable resources

Test it

Security Audit

Confirmed security concerns (4)

Risk Factors

Copy report link

Markdown badge

HTML badge

Embed card

APA citation

BibTeX citation

CITATION.cff

Skillstore Score

What You Can Build

Review User Uploads

Check Product Assets

Triage Media Libraries

Try These Prompts

Best Practices

Avoid

Frequently Asked Questions

Developer Details

More from xiaowu89

nx-matting

image-compress

azure-ai-contentsafety-ts

azure-ai-contentsafety-py

azure-ai-contentsafety-java

obsidian-helper

tool-design

bilig-workpaper

image-audit

Install with my Agent

Agent-readable resources

Test it

Security Audit

Confirmed security concerns (4)

Risk Factors

Copy report link

Markdown badge

HTML badge

Embed card

APA citation

BibTeX citation

CITATION.cff

Skillstore Score

What You Can Build

Review User Uploads

Check Product Assets

Triage Media Libraries

Try These Prompts

Best Practices

Avoid

Frequently Asked Questions

Developer Details

More from xiaowu89

nx-matting

image-compress

Related Skills

azure-ai-contentsafety-ts

azure-ai-contentsafety-py

azure-ai-contentsafety-java

obsidian-helper

tool-design

bilig-workpaper