Batch Image Processor Pro
v1.0.0批量处理图片，支持压缩、裁剪、水印、格式转换、重命名及色彩调整，适用于电商和社交媒体图片优化。
⭐ 0· 165·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (批量图片处理) match the SKILL.md operations (压缩、裁剪、水印、格式转换、重命名、色彩调整). The only minor inconsistency is _meta.json.requires listing 'pillow' and 'opencv-python' even though the skill is instruction-only and provides no install steps; this is plausible (metadata indicating libraries needed) but not enforced by the package.
Instruction Scope
SKILL.md contains only localized, file-system-oriented commands (examples reference local directories like ./images, watermarks, output dirs). There are no instructions to call external endpoints, read unrelated system files, or exfiltrate data. It does mention EXIF information cleaning (expected for image tools), which implies reading image metadata (may include sensitive GPS data) but that's within the stated purpose.
Install Mechanism
No install spec is provided (instruction-only), which is low risk. However, _meta.json lists runtime Python dependencies (pillow, opencv-python) without an install step; this mismatch means the agent or user must ensure those libs are available, and the runtime behavior is ambiguous.
Credentials
The skill requests no environment variables, credentials, or config paths. That is proportionate for a local image processing tool. There are no unexpected secrets requested.
Persistence & Privilege
Skill flags are default (always:false, model invocation allowed). There is no indication the skill requires persistent/system-level privileges or modifies other skills' settings.
Assessment
This skill appears to do what it claims and doesn't request credentials or network access. Before installing/using: 1) Confirm whether your agent environment has the Python libraries listed in _meta.json (pillow, opencv-python) — the skill provides no install steps. 2) Test the commands in a safe directory (not your home) to confirm behavior. 3) Be aware EXIF cleaning will read and remove metadata (may remove GPS info you want to keep). 4) Because source/homepage is unknown and the package is paid per metadata, consider obtaining more author/source info or running in a sandbox if you need higher assurance.Like a lobster shell, security has layers — review code before you run it.
latestvk97029y9ac7c462bh45hj4cw8583v1xh
License
MIT-0
Free to use, modify, and redistribute. No attribution required.