Image Quality Assessment Analysis Tool | 图像质量检测分析工具

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill is coherent for cloud-based image quality analysis, but users should notice that selected camera media and a user identifier are sent to a remote service and may be retained in reports.

This looks like a purpose-aligned cloud image-quality analysis skill. Before installing, make sure you are comfortable sending selected surveillance images/videos and your open-id to the configured service, and clean up local attachments or cloud reports if the footage is sensitive.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Camera footage or image URLs you provide may leave your local environment and be processed by the configured provider.

Why it was flagged

The skill explicitly sends selected local camera media or media URLs to an external API for analysis.

Skill content
`--input`: 本地图片/视频文件路径(使用 multipart/form-data 方式上传) ... `--url`: 网络图片/视频 URL 地址(API 服务自动下载)
Recommendation

Only submit media you intend to share with the provider, and verify the provider and privacy expectations before using sensitive surveillance footage.

What this means

The identifier may link analyses to a report history, and entering the wrong identifier could affect which records are associated or queried.

Why it was flagged

The skill requires an open-id that may be a username or phone number and uses it for saving and querying report records.

Skill content
必须暂停执行,明确提示用户提供用户名或手机号作为 open-id ... 用于保存和查询检测报告记录
Recommendation

Provide only your own identifier, avoid sharing unnecessary personal identifiers, and confirm that report access is properly authenticated by the service.

What this means

Uploaded images or videos may remain on disk after analysis unless cleaned up separately.

Why it was flagged

The instructions state that uploaded media is automatically saved locally under the skill directory, implying local persistence of potentially sensitive camera footage.

Skill content
如果用户上传了附件或者图片/视频文件,则自动保存到技能目录下 attachments
Recommendation

Delete local attachments when no longer needed, and avoid uploading highly sensitive footage unless local retention is acceptable.

What this means

If configured to use the dev environment, analysis data could be sent to a private or unverified endpoint.

Why it was flagged

A bundled development configuration points to a private HTTP API endpoint; it is not the default prod config, but it could redirect traffic if the environment were changed.

Skill content
base-url-open-api: "http://192.168.1.234:9601/smyx-open-api"
Recommendation

Keep the skill on the production configuration unless you explicitly trust and control the development endpoint.