ClawHub
Back to skill

Security audit

Unlimited-OCR Document Parsing

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed OCR connector that sends user-selected documents to Baidu Cloud or a configured local/OpenAI-compatible OCR service and saves the returned text.

Before installing, users should understand that cloud mode can send document contents and OCR credentials to Baidu Cloud, while local mode sends images/PDF pages to the configured local or compatible OCR endpoint. Use it only for documents you are allowed to process with that provider, and verify endpoint override environment variables before use.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Lp3

Medium
Category
MCP Least Privilege
Confidence
88% confidence
Finding
The skill declares capabilities to read files, write output, access environment variables, and make network requests, but it does not expose an explicit permission model or clear execution boundaries in the skill manifest. This can lead to overbroad access during invocation, especially because the skill is designed to send document contents and credentials to remote OCR services.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.potential_exfiltration

Python code base64-encodes a local file and sends it over the network.

Critical
Code
suspicious.potential_exfiltration
Location
scripts/client.py:210