Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Ms Qwen Vl

v0.1.0

调用魔搭社区(ModelScope)Qwen3-VL 多模态 API 进行视觉解析。使用 OpenAI SDK 兼容方式调用,支持图片内容描述、OCR 文字提取、视觉问答、对象检测等功能。用户提到"魔搭"、"ModelScope"、"Qwen-VL"、"多模态视觉"、"解析图片"等关键词时应触发。

0· 1.6k·4 current·4 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description, README, SKILL.md and the Python script all consistently implement a ModelScope (Qwen3-VL) multimodal image analysis skill using an OpenAI-SDK-compatible client and support describe/ocr/ask/detect/chart tasks — the requested capabilities align with the stated purpose.
Instruction Scope
Runtime instructions explicitly tell the agent (and users) to run scripts that read local image files (e.g., Desktop screenshots), encode them as base64, and send them to the remote ModelScope API. This is necessary for the stated functionality, but it is also a direct data-exfiltration vector for any sensitive local images. The SKILL.md examples instruct the assistant to execute local commands, which is expected but increases privacy risk.
Install Mechanism
There is no install spec in the registry (instruction-only), but the bundle includes requirements.txt and a Python script that depends on openai, Pillow, and python-dotenv. Lack of an automated install step is low risk, but users must install dependencies manually; nothing is downloaded from unknown external installers in the manifest.
!
Credentials
The registry metadata lists no required environment variables or primary credential, but SKILL.md/README and the script require MODELSCOPE_API_KEY (and optionally MODELSCOPE_MODEL / MODELSCOPE_MODEL_PRECISE). This mismatch is an inconsistency that could mislead users about credentials the skill needs. The script will fail without an API key and will send the provided API key to the ModelScope endpoint — so a required secret is present but not declared in metadata.
Persistence & Privilege
Flags show always:false and no special OS restrictions. The skill does not request persistent system-wide privileges, does not modify other skills, and does not require being always-included; no elevated persistence is requested.
What to consider before installing
Key points before installing: - Metadata inconsistency: the registry claims no required env vars, but the skill and scripts require MODELSCOPE_API_KEY (and optionally model-related env vars). Expect to provide a ModelScope API key. Verify where you will store that key (scripts/.env vs .env mismatch in docs). - Data exfiltration risk: the script base64-encodes local image files and sends them to https://api-inference.modelscope.cn/v1. If you run this skill (or let an agent run it) and point it at files on your computer, those images will be transmitted to a third-party service. Do not use it on sensitive images unless you trust the ModelScope service and your network. - Execution behavior: SKILL.md encourages running the bundled Python script to handle local files. If you enable autonomous agent invocation, the agent could execute the script and thereby read local image paths you mention. Consider limiting agent autonomy or running the tool manually in a controlled environment. - Dependency & path mismatches: the bundle includes requirements.txt (openai, Pillow, python-dotenv) but no automated installer; follow README to install dependencies. The README and SKILL.md reference different .env file paths (root vs scripts/); confirm which path you will use and where the API key is loaded from. - Verify the endpoint & code: if you require stronger guarantees, review the ms_qwen_vl.py code (it is included) and confirm the base_url and request behavior meet your security and privacy requirements. If needed, run the tool in an isolated sandbox or on non-sensitive sample images first.

Like a lobster shell, security has layers — review code before you run it.

latestvk972t24p5ycyy0zpbef69xm5ks80cbzt

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments