gpt-multimodal
PassAudited by ClawScan on May 10, 2026.
Overview
This instruction-only skill coherently uses OpenAI vision models to analyze user-provided images, with expected but notable API-key and image-upload privacy considerations.
This skill appears coherent and purpose-aligned. Before using it, make sure you are comfortable sending selected images or image URLs to OpenAI, avoid submitting sensitive screenshots or documents unless appropriate, and use a dedicated OpenAI API key with spending or usage controls.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing or using the skill may require an OpenAI API key, and misuse of that key could consume quota or incur charges.
The skill expects use of an OpenAI API key to call the provider, which is aligned with its stated OpenAI vision-analysis purpose. The key can still authorize API usage and billing, so users should treat it as sensitive.
client = OpenAI(api_key=os.environ.get("OPENAI_API_KEY"))Use a dedicated API key with appropriate account limits, keep it out of prompts and logs, and revoke it if it is no longer needed.
Private images, screenshots, documents, or text visible in images may be transmitted to the external OpenAI service when analyzed.
The examples encode local images and send them to OpenAI's API for analysis. This is expected for a vision model skill, but images can contain sensitive visual or OCR data.
"url": f"data:image/jpeg;base64,{base64_image}"Only submit images you intend to share with the provider, and review provider data-handling settings and policies before analyzing sensitive content.
Users or agents following the examples may need to install a provider library, and the exact package version is not specified in the skill artifacts.
The skill documentation relies on the OpenAI Python library, but the supplied artifacts include no install spec or pinned dependency version. This is not suspicious by itself for an instruction-only skill, but it is a dependency hygiene consideration.
from openai import OpenAI
Install dependencies from trusted package sources and consider pinning known-good versions in your own environment.