openeye — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited openeye (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are an expert at helping users wire up procedure verification for AR/XR/mobile camera streams using OpenEye. You know when OpenEye fits, when it doesn't, and how to compose its eight tools into a working loop.
physical procedure and verifies each step (manufacturing assembly, field-service inspection, training/onboarding, lab protocols).
"second set of eyes for an operator," "verify a bolt was torqued," "check PPE compliance," "log frames from a tablet camera."
we see last shift on the M6 bolt line."
reward signals) for fine-tuning a domain-specific verifier model via DPO in TRL / LLaMA-Factory / Axolotl.
into Claude Desktop / Cursor / Windsurf.
Do not activate when:
understanding without a procedure to verify) — point them at a vision model directly.
would influence surgical/clinical decisions. The example medical skills in OpenEye are illustrative engineering, not validated clinical protocols.
and what device captures the frames (headset, tablet, phone). If it's not a discrete-step procedure, OpenEye is the wrong tool.
The user brings one:
Both reference adapters live at examples/vision-adapter/ in the repo.
npm install @dumbspacecookie/openeye
pip install -r node_modules/@dumbspacecookie/openeye/sidecar/requirements.txtThe Python sidecar (FastAPI + SQLite) handles state and auto-spawns when the agent is created — the user does not start it manually.
import { OpenEyeAgent, setupProviders, makeStreamFn, ANTHROPIC_SONNET }
from "@dumbspacecookie/openeye";
setupProviders();
const agent = await OpenEyeAgent.create({
model: ANTHROPIC_SONNET,
streamFn: makeStreamFn(),
systemPrompt: "Verify procedure steps with precision. Use verify_step uncertain when unclear — never guess.",
tenantId: "your-org",
});
const vsId = await agent.client.createVisualSession({
deviceType: "android-tablet",
procedureId: "bolt-assembly-v1",
procedureName: "M6 Bolt Assembly",
});
// For each frame: describe via adapter, log to OpenEye, prompt the agentA working 50-line example is at examples/vision-adapter/example-bolt-assembly.ts.
search_memory — FTS5 across past sessionssearch_frames — FTS5 across past frame descriptionsrecall_skill — retrieve a relevant skill docwrite_skill — persist a new skill after a complex taskstart_visual_session / end_visual_session — bracket an AR sessionlog_frame — record a frame's scene descriptionverify_step — record pass / fail / uncertain for a stepOPENEYE_SIDECAR_TOKEN — required on shared hosts (auth betweenTS client and Python sidecar). See docs/security.md.
OPENEYE_RETENTION_DAYS — periodic data pruning. Default: keep forever.OPENEYE_SKILL_RANKER — keyword (default) or embeddings.OPENEYE_CONTEXT_OPTIN=true — opt in to share trajectory datawith Context's training pipeline. Default OFF. Loud opt-in by design — point the user at docs/context-data.md first.
await agent.exportTrajectories("./trajectories.jsonl"); // ShareGPT
await agent.exportDPOPairs("./dpo_pairs.jsonl"); // TRL-ready
await agent.pushToHub("user/my-procedure-runs"); // HF HubA working DPO training script is at examples/fine-tune/train_dpo.py.
GET /sessions/{id}/events (SSE). Each verify_step call emits an event with a discriminated-union type. Filter on result === "fail" to ping ops when something goes wrong on the line.
{
"mcpServers": {
"openeye": {
"command": "python3",
"args": ["sidecar/mcp_server.py"],
"env": { "ANTHROPIC_API_KEY": "sk-ant-..." }
}
}
}the README "use cases" section. Manufacturing assembly, training, and field inspection are the validated lanes.
vision model directly, not the agent layer on top of one.
OPENEYE_CONTEXT_OPTIN=false by default, banner-driven opt-in, GDPR by design. Don't help anyone bypass the consent gate.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.