image-audit
Detects adult, political and violent content in images via automated batch auditing. Compresses large images, calls MCP audit service, and outputs results as a table. Use when auditing images, checking image content, scanning photos for inappropriate material, or when the user says audit images, ...
Install this skill
or
87/100
Security score
The image-audit skill was audited on Jul 28, 2026 and we found 5 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
low line 63
Command substitution pattern
SourceSKILL.md
| 61 | |
| 62 | ```bash |
| 63 | NODE_PATH=$(npm root -g) node -e "require('sharp')" 2>/dev/null || npm install -g sharp |
| 64 | NODE_PATH=$(npm root -g) node << 'AUDITEOF' |
| 65 | const fs=require('fs'),path=require('path'),sharp=require('sharp'); |
low line 64
Command substitution pattern
SourceSKILL.md
| 62 | ```bash |
| 63 | NODE_PATH=$(npm root -g) node -e "require('sharp')" 2>/dev/null || npm install -g sharp |
| 64 | NODE_PATH=$(npm root -g) node << 'AUDITEOF' |
| 65 | const fs=require('fs'),path=require('path'),sharp=require('sharp'); |
| 66 | let PIC_DIR='<目标图片目录绝对路径>'; |
medium line 136
Command substitution pattern
SourceSKILL.md
| 134 | | `"未配置 API Key"` | 没传 `apiKey` | **必须传**，工具定义说可选是误导 | |
| 135 | | `413 Payload Too Large` | payload 超限 | 压缩后通常 < 200KB，不触发；未压缩大图需分批 | |
| 136 | | `Cannot find module 'sharp'` | 未全局安装或缺少 NODE_PATH | `NODE_PATH=$(npm root -g) node ...` | |
| 137 | |
| 138 | ## 禁止事项 |
low line 48
Access to home directory dotfiles
SourceSKILL.md
| 46 | |
| 47 | ```bash |
| 48 | cat .mcp.json 2>/dev/null || cat ~/.mcp.json 2>/dev/null |
| 49 | ``` |
| 50 |
medium line 53
Access to home directory dotfiles
SourceSKILL.md
| 51 | - 找到 → 记录 `url` 和 `NX_API_KEY`，继续步骤 2 |
| 52 | - 找不到 → 询问用户是否已有 API Key： |
| 53 | - **有 Key**：帮用户创建 `~/.mcp.json`（用户家目录），全局和项目安装都通用 |
| 54 | - **没有 Key**：告知联系微信 `zhjian_2026` 获取，等用户拿到后回来配置 |
| 55 |
Scanned on Jul 28, 2026
View Security Dashboard