Kami Image Search
ReviewAudited by ClawScan on May 13, 2026.
Overview
No malicious behavior is evident, but this skill is privacy-sensitive because it can continuously process camera images through a cloud API and store a searchable visual history.
Before installing, confirm you trust the Kamivision cloud service, update the camera stream URL and API key yourself, protect image_config.json, review setup.sh, and regularly stop capture or delete retained image data when you no longer need it.
Findings (5)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Private camera frames, imported images, and search queries may leave the device and be processed by the provider.
The documentation clearly says camera/imported images and search text are sent to the Kamivision cloud API for processing.
`SUMMARY`: Takes image base64, returns description (summary) + text embedding ... `EMBED`: Takes query text, returns text embedding
Install only if you trust the Kamivision API and are comfortable sending the selected camera or image data to it; review the provider's privacy and retention terms.
A local searchable history of household or personal images may remain on disk even after the original task is finished.
The skill stores a searchable local visual history, including metadata and vector indexes, so captured or imported imagery can persist and be reused for future searches.
image_data/ ... metadata.db ... faiss.index
Set an appropriate DATA_DIR and RETENTION_DAYS, protect the storage directory, and delete stored images/indexes when they are no longer needed.
Once started, capture can continue in the background until stopped, creating ongoing privacy exposure.
The skill supports ongoing background frame capture, but it is documented and includes stop/status controls.
Monitor your camera feed, capture frames automatically ... Start Capture ... Stop Capture
Use --status to confirm whether capture is running and --stop-capture when monitoring is no longer needed.
Anyone who can read the config file may learn camera connection details or the API key once configured.
The configuration file is intended to hold camera stream credentials and the Kamivision API key; this is purpose-aligned but sensitive.
"STREAM_URL": "rtsp://admin:ai123456@192.168.2.108:554/stream1" ... "KAMIVISION_API_KEY": ""
Replace example/default stream credentials, restrict file permissions, avoid sharing image_config.json, and rotate keys if exposed.
Installation may modify the local environment and depends on package repositories at install time.
The user-run setup script can install a system package and fetch Python dependencies, which is expected for this skill but depends on external package sources.
sudo apt install -y ffmpeg ... "$VENV_DIR/bin/pip" install -q -r "$SKILL_DIR/requirements.txt"
Review setup.sh before running it, consider pinning dependency versions, and install in an isolated environment where possible.