Skip to main content

image-extraction-debug

Debugs issues with AI-powered puzzle image extraction using Gemini/GPT vision API, ensuring accurate grid and domino extraction.

Install this skill

or
59/100

Security score

The image-extraction-debug skill was audited on Feb 12, 2026 and we found 9 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 58

Template literal with variable interpolation in command context

SourceSKILL.md
58prompt = `${GRID_EXTRACTION_PROMPT}
medium line 96

Template literal with variable interpolation in command context

SourceSKILL.md
96? `${DOMINO_EXTRACTION_PROMPT}\n\nThere should be EXACTLY ${expectedCount} dominoes in the image.`
medium line 243

Template literal with variable interpolation in command context

SourceSKILL.md
243throw new Error(`GPT-5.2 API error: ${response.status}`);
medium line 425

Template literal with variable interpolation in command context

SourceSKILL.md
425console.error(`Cell count mismatch: got ${totalCells}, expected ${expectedCells}`);
medium line 430

Template literal with variable interpolation in command context

SourceSKILL.md
430console.error(`Dimension mismatch: got ${grid.width}×${grid.height}, expected ${sizeHint.cols}×${sizeHint.rows}`);
medium line 435

Template literal with variable interpolation in command context

SourceSKILL.md
435console.error(`Domino count mismatch: got ${dominoes.length}, expected ${sizeHint.dominoCount}`);
medium line 443

Template literal with variable interpolation in command context

SourceSKILL.md
443console.warn(`Impossible sum: region size ${region.size} can't sum to ${region.constraint_value}`);
low line 251

Access to .env file

SourceSKILL.md
251const OPENROUTER_API_KEY = process.env.EXPO_PUBLIC_VIBECODE_OPENROUTER_API_KEY;
medium line 254

Access to .env file

SourceSKILL.md
254Verify in `.env` file or Vibecode ENV tab.
Scanned on Feb 12, 2026
View Security Dashboard
Installation guide →