MCP Observatory
npm analyzed 1.1.71

@scp3500/openvl

v1.1.71
npm

让 AI 看懂图片 - 支持命令行和 MCP 服务器

maintainer
scp3500
license
MIT
first seen
2026-05-22
last seen
2026-06-17
releases · 30d
143
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport stdio · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signals npm-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v1.1.71 · analyzer v18 · 11h ago

skills & prompt files 2

code evidence v1.1.71 · npm-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

filesystem 3

  • fs package/bin/postinstall.js :2 const fs = require('fs');
  • fs package/integrations/opencode/openvl-image.mjs :1 import fs from "fs";
  • fs package/scripts/mcp_server.js :5 const fs = require('fs');

shell / exec 2

  • shell package/bin/postinstall.js :4 const { spawnSync } = require('child_process');
  • shell package/scripts/mcp_server.js :8 const { spawnSync } = require('child_process');

network 1

  • net package/scripts/mcp_server.js :7 const http = require('http');

secrets 1

  • secrets package/scripts/mcp_server.js :49 if (process.env.VISION_API_KEY && !process.env.VISION_API_KEY.includes('你的'))

install hooks 1

  • postinstall package/package.json :9 node ./bin/postinstall.js