TIFF Merge & Split

合并图片为 TIFF 或拆分 TIFF 为单张图片（本地处理，隐私安全）

This skill is not showing signs of data exfiltration or secret access, but it contains inconsistencies you should address before using it on important files: (1) The README and SKILL.md claim JPG/PNG input and PNG/JPG output support, but the code lacks the image decoding/encoding logic (split mode doesn't actually write files). (2) SKILL.md references installing the npm 'utif' package even though the registry metadata doesn't declare an install step. Recommended actions: run the code in a sandbox or disposable container, inspect and/or run npm install utif locally, test with non-sensitive sample files to confirm behavior, and ask the author to fix the implementation or provide a clear install spec (ideally add a proper image library like 'sharp' or canvas for JPG/PNG handling and make split actually write output files). If you need fully working JPG/PNG ↔ TIFF support, prefer a package whose code and documentation clearly match.

Type: OpenClaw Skill Name: tiff-merge Version: 1.0.1 The skill provides local TIFF image merging and splitting functionality using the legitimate 'utif' library. Analysis of 'index.js' and 'SKILL.md' shows the code performs standard file system operations (fs.readFileSync, fs.writeFileSync) consistent with its stated purpose, with no evidence of data exfiltration, malicious execution, or prompt injection.