Photos

ReviewAudited by ClawScan on May 10, 2026.

Overview

This photo organizer is mostly coherent, but it should be reviewed because it can permanently store searchable details about your photos, locations, and identified people.

Review before installing if your photo library contains private images, locations, or identifiable people. Use it only on folders you choose, confirm any bulk or metadata-changing operation, and periodically inspect or delete `.photo-index/` if you do not want a persistent searchable cache.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A local searchable index could reveal where photos were taken, what they contain, and how they are tagged even after the user stops actively using the skill.

Why it was flagged

The skill instructs the agent to persist sensitive photo-derived data, including locations, descriptions, and tags, and to keep vision analysis results permanently.

Skill content
Index fields: `hash`, `path`, `date_taken`, `camera`, `gps`, `description`, `tags`, `indexed_at` ... Cache vision results permanently in sidecar JSON
Recommendation

Use this only on photo folders you intentionally select, review the `.photo-index/` contents, and provide a clear way to delete or rebuild the index.

What this means

Precise photo locations could be shared outside the local machine depending on how reverse geocoding is implemented.

Why it was flagged

Reverse geocoding may require sending photo GPS coordinates to an external geocoding service, but the artifact does not name the service or describe data-boundary controls.

Skill content
By location: Reverse geocode GPS once, store city/country in sidecar for text search
Recommendation

Ask which geocoding service will be used and approve any location lookup before sending GPS data externally.

What this means

Photo metadata could be changed if the agent runs the command on originals rather than reviewed copies.

Why it was flagged

The documented EXIF command can modify photo metadata; this is purpose-aligned, but it should be done only with explicit user approval and preferably on copies or with backups.

Skill content
Write date: `exiftool -DateTimeOriginal="2024:03:15 14:30:00" photo.jpg`
Recommendation

Require confirmation before metadata writes and verify that originals are backed up or edits are made on copies.