calorie1-detective-v3

热量侦探 v2.0.0 - AI 食物卡路里计算器。通过 Kimi 视觉识别照片中的食物，自动计算卡路里、蛋白质、碳水、脂肪等营养数据。内置常见食物营养数据库。用于健康饮食管理、减肥健身追踪。再隐蔽的热量也逃不过我的眼睛！

Security Scan

The skill appears to implement the stated photo → calorie workflow, but there are inconsistencies (it reads API keys and local config files that were not declared in the metadata) and some surprising behaviors you should review before installing.

Purpose & Capability

The code, config, and SKILL.md align with the stated purpose (image recognition via a vision API + local nutrition DB). Optional support for multiple providers (Kimi, OpenAI, Nutritionix, FatSecret) is reasonable for a flexible tool. However the package metadata declared no required environment variables/credentials while the code expects/reads API keys (e.g., KIMI_API_KEY, USER_KIMI_API_KEY, OPENAI_API_KEY, NUTRITIONIX keys) and a local config file — this mismatch is noteworthy.

Instruction Scope

Runtime instructions and shipped scripts (run.sh, test.sh) simply run the Python calculator, but the Python code will load config/config.local.yaml if present, read environment variables for API keys, and write logs to data/calorie.log. The SKILL.md and metadata do not explicitly call out those file reads/writes or all env-vars the code may consult, giving the agent more filesystem and network access than the metadata implies.

Install Mechanism

There is no install spec (instruction-only install), and dependencies are declared in requirements.txt. No external downloads or obscure installers are used. Risk from installation is low, but running the included Python code will perform network calls.

Credentials

The code uses multiple optional API keys and environment variables (KIMI_API_KEY, USER_KIMI_API_KEY, OPENAI_API_KEY, NUTRITIONIX_APP_ID/KEY, FATSECRET_KEY) and will prefer a local config file if present. While these are plausible for supporting different providers, the registry metadata declares no required secrets and no primary credential — that under-declaration reduces transparency and may cause accidental credential exposure if a user places secrets in config files or env variables without realizing the skill will read them.

Persistence & Privilege

The skill does not request always:true, does not modify other skills, and only writes a local log file (data/calorie.log). It can make outbound network requests to the configured vision API endpoint but does not request elevated platform privileges.

What to consider before installing

This skill's behavior mostly matches its description, but it reads local config files and environment variables for API keys even though the metadata declared none. Before installing: (1) Inspect config/config.yaml and remove/add any secrets only intentionally (prefer env vars to checked-in config files). (2) Do not put sensitive credentials in config/config.local.yaml unless you trust the skill and host. (3) Note the skill will send images (base64) to https://api.moonshot.cn/v1/chat/completions (Kimi) or other configured provider endpoints — confirm you are comfortable with that network traffic. (4) Run the code in a sandbox / with non-production keys first and review data/calorie.log for what is written. (5) If you want to limit exposure, set provider to 'local' and avoid providing API keys so the skill uses its built-in database only.

🔍 热量侦探 v3.0.0

🕵️ 再隐蔽的热量也逃不过我的眼睛！

通过 Kimi 视觉识别技术，像侦探一样找出食物中隐藏的热量，自动计算卡路里和营养成分，帮助你更好地管理饮食健康。

✨ 功能特性

1. 📸 拍照识别 - 使用 Kimi 视觉 API 自动识别食物
2. 🔥 卡路里计算 - 自动计算总卡路里和宏量营养素
3. 📊 营养报告 - 生成详细的营养分析报告
4. 💡 健康建议 - 提供饮食改进建议
5. 🌐 中文优化 - 专为中餐优化，识别更准确
6. 💾 本地数据库 - 内置 100+ 种常见食物营养数据

🍎 内置食物数据库

已内置 100+ 种常见食物营养数据（每 100 克）：

类别	食物举例
🍚 主食	米饭、面条、馒头、面包、土豆
🥚 蛋白质	鸡蛋、牛奶、鸡肉、猪肉、牛肉、鱼、虾
🍎 水果	苹果、香蕉、橙子、葡萄、草莓
🥬 蔬菜	青菜、番茄、黄瓜、胡萝卜、西兰花
🍔 快餐	汉堡、薯条、炸鸡、披萨

🔄 扩展开发

添加新食物

编辑 src/calorie_calculator.py 中的 COMMON_FOODS 字典：

COMMON_FOODS = {
    '你的食物': {'calories': 100, 'protein': 5, 'carbs': 15, 'fat': 3},
    ...
}

📝 更新日志

v3.0.0 (2026-03-04) - 正式发布版

• ✅ Kimi 视觉识别支持（moonshot-v1-8k-vision-preview）
• ✅ 本地食物营养数据库（100+ 种食物）
• ✅ 营养报告生成
• ✅ 健康饮食建议
• ✅ 中文食物识别优化
• ✅ 品牌：热量侦探
• ✅ 测试通过（避风塘炒虾、油焖大虾）

v2.0.0 (2026-03-03) - 重大更新

• ✅ Kimi 视觉识别支持
• ✅ 本地食物营养数据库
• ✅ 营养报告生成

v1.0.0 (2026-03-03) - 正式发布版

• ✅ 基础功能实现

⚠️ 免责声明

• 本工具提供的营养数据仅供参考，不构成医疗或营养建议
• 实际食物营养含量可能因烹饪方式、食材来源等因素有所不同
• 如有特殊饮食需求或健康问题，请咨询专业营养师或医生
• 开发者不对使用本工具造成的任何损失承担责任

📄 License

MIT

🤝 贡献

欢迎提交 Issue 和 Pull Request！

📧 联系方式

如有问题或建议，请提交 Issue 或联系开发者。

---

🕵️ 热量侦探，再隐蔽的热量也逃不过我的眼睛！ 🍽️