vision

Mostly coherent vision-inference skill with normal first-party API usage for built-in providers and low supply-chain concern. The main issue is custom-provider support: it allows arbitrary endpoints and forwards API keys, prompts, and image data to them, making the skill better classified as SUSPICIOUS/MEDIUM risk rather than benign.