Security audit
Security checks for vulnerabilities and agentic risk
This skill is a simple image-analysis helper that uses the browser to open image links and does not include hidden code, persistence, or unrelated access.
Install this if you want a browser-based image analysis helper and are comfortable with it opening image URLs. Be cautious with private or untrusted links because loading them may reveal normal network metadata to the image host, and the documentation is currently Chinese-only.
The natural-language instructions and headings are presented exclusively in Chinese, which can force a specific language on users without opt-in. The file does not indicate that the skill is region-specific or provide an alternative language option.
The skill explicitly tells the agent to open externally provided image URLs in a browser, which can trigger outbound network requests to third-party infrastructure and expose metadata such as IP, headers, or timing. In the context of images received from QQ or other untrusted sources, this also increases SSRF-like and privacy risks unless the user is clearly warned and link handling is constrained.
No suspicious patterns detected.
