luma-vision

No clear evidence of overt malware (no eval/Function, no reverse shell, no file-system damage, no persistence). However, the code can exfiltrate user images to a remote API: it may automatically select the newest cached image from multiple user directories when no explicit image is provided, and it fetches arbitrary http/https image URLs without domain allowlisting, then transmits the image base64 in the API request. Overall risk is primarily privacy/data-leakage related rather than malicious system takeover.

该技能的核心能力与“外部视觉模型看图”目的基本一致，但其将图片与凭据发送到用户自定义的任意 CUSTOM_BASE_URL，缺少官方端点约束与数据流验证，因此整体应判为可疑而非明显恶意。