Is ademczuk/menuvision safe?
Yes. ademczuk/menuvision is safe to install. Oathe's behavioral security audit gave the menuvision skill by ademczuk a trust score of 88/100 with 4 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/ademczuk/menuvision
Is ademczuk/menuvision safe to install?
MenuVision appears to be a legitimate restaurant menu processing tool with sophisticated functionality for extracting menu data and generating HTML presentations. The skill showed clean installation behavior with no unauthorized file access or malicious activity detected. However, it creates a notable attack surface through external API dependencies and dynamic code generation capabilities.
What security issues were found in ademczuk/menuvision?
Category Scores
Findings (4)
MEDIUM External API Data Transmission -10 ▶
Skill generates code that transmits menu content and user data to Google Gemini API for processing. While legitimate for stated functionality, this creates a potential data exfiltration pathway if misused.
MEDIUM Dynamic Python Script Generation -12 ▶
Skill instructs AI agent to generate and execute Python scripts with file system and network access. Could potentially be exploited through malicious prompts to execute unintended code.
LOW GitHub Publishing Capability -8 ▶
Optional GitHub Pages publishing feature could potentially be misused to exfiltrate data through repository uploads if authentication tokens are compromised.
LOW Complex External Dependencies -12 ▶
Skill creates significant attack surface through multiple external service dependencies and file processing capabilities, though no malicious behavior was observed.
Should I install ademczuk/menuvision?
Oathe's verdict for ademczuk/menuvision is SAFE with a trust score of 88/100. Recommendation: Install with caution.