CamScanner Extract Formula

• Outcome: Pass
• Latest audit: May 29, 2026, 8:44 PM
• Version:
  1.0.1

Overview

This skill does what it says: it uploads a user-selected image to CamScanner to extract formulas, then downloads the processed PNG.

Install only if you are comfortable sending selected images to CamScanner for processing. Avoid using it with sensitive, proprietary, medical, financial, or student records unless you have reviewed and accept CamScanner's privacy and retention terms.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

External Transmission

Medium

• Category: Data Exfiltration

Content

```bash
BASE="https://ai-tools.camscanner.com"

IN_FILE_ID=$(curl -sS -X POST "$BASE/v1/tools/upload_file/execute" \
  -H "Content-Type: application/octet-stream" \
  --data-binary "@/path/to/image.png" | jq -r '.tool_result.data.file_id')
```

• Confidence: 97% confidence
• Finding: curl -sS -X POST "$BASE/v1/tools/upload_file/execute" \ -H "Content-Type: application/octet-stream" \ --data-binary

VirusTotal

63/63 vendors flagged this skill as clean.