Auto Image Reader
v1.0.1自动读取用户上传的图片。当用户发送图片时（通过飞书/Telegram等渠道），系统会在消息中附带图片路径。触发后自动读取图片内容并理解，无需手动查找路径。
⭐ 0· 86·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description say: find and read images uploaded by users. The SKILL.md only requires use of two named tools (images_list and images_understand) and message metadata to locate and process images — these are the minimal, expected capabilities for this purpose.
Instruction Scope
Instructions stay within the declared purpose (find absolute path then analyze image). They explicitly tell the agent to call images_list and then images_understand and to extract filenames from message metadata. Note: images_list is used to enumerate /workspace images (searching up to 20 items). This is appropriate for locating uploaded files but does entail scanning workspace image entries — verify the images_list tool is scoped to the conversation/context and does not expose unrelated user data.
Install Mechanism
Instruction-only skill with no install spec and no code files; nothing is written to disk or downloaded. This is the lowest-risk install posture and matches the simple runtime instructions.
Credentials
The skill requests no environment variables, credentials, or config paths. The only data access it requires is images_list output and message metadata, which is proportional to the stated task.
Persistence & Privilege
always is false and agent invocation is allowed (default). The SKILL.md states its logic has been written to MEMORY.md — this persistent memory is reasonable for UX (remembers to always call images_list first) but the user should be aware that the 'must use images_list' behavior is stored persistently.
Assessment
This skill appears coherent and minimal: it simply enumerates images via images_list to find the absolute path and then calls images_understand to analyze them. Before installing, confirm that (1) the images_list tool only returns files relevant to the current conversation or user (to avoid accidentally exposing other users' or unrelated files), (2) persistent memory entry (MEMORY.md) storing the 'always use images_list first' rule is acceptable for your privacy policy, and (3) you consent to automatic reading of uploaded images. If any of those are concerns, ask the skill author how images_list is scoped and whether the memory entry can be removed or restricted.Like a lobster shell, security has layers — review code before you run it.
latestvk97aaz08g91ejmcexpvsqx0ayh84ptd1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.