Security audit
DeepSeek Harness PaddleOCR GUI Setup
Security checks across malware telemetry and agentic risk
Overview
This is a straightforward setup guide for a third-party PaddleOCR plugin in DeepSeek Harness, with disclosed install steps and credential-handling guardrails.
Before installing, confirm you trust the third-party GitHub plugin source and the OCR service endpoints you configure. Use the DSH Credential field for tokens, avoid pasting secrets into files or chat logs, and only process documents that are appropriate to send to the selected OCR service.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.