ClawHub
Back to skill

Security audit

CamScanner Detect Tampering

Security checks for vulnerabilities and agentic risk

Overview

This skill sends user-selected images to CamScanner for tampering analysis, which is expected for its purpose but has normal third-party privacy risk.

Install only if you are comfortable sending selected images to CamScanner's servers for analysis. Avoid using it on confidential documents, personal photos, or regulated data unless that third-party processing is acceptable.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

External Transmission

Medium
Category
Data Exfiltration
Content
```bash
BASE="https://ai-tools.camscanner.com"

IN_FILE_ID=$(curl -sS -X POST "$BASE/v1/tools/upload_file/execute" \
  -H "Content-Type: application/octet-stream" \
  --data-binary "@/path/to/image.jpg" | jq -r '.tool_result.data.file_id')
```
Confidence
97% confidence
Finding
This code uploads a local image file to an external third-party service, which is a real data exfiltration boundary even if it is the intended function of the skill. The risk is contextual rather than covert: sensitive photos or documents may be transmitted off-platform, and users may not fully understand the privacy implications despite the notice in the skill.

External Transmission

Medium
Category
Data Exfiltration
Content
INPUT_IMAGE="/path/to/image.jpg"

# Upload
IN_FILE_ID=$(curl -sS -X POST "$BASE/v1/tools/upload_file/execute" \
  -H "Content-Type: application/octet-stream" \
  --data-binary "@$INPUT_IMAGE" | jq -r '.tool_result.data.file_id')
Confidence
97% confidence
Finding
This is another example of the same external upload behavior in the quick-reference pipeline: a local image is sent to CamScanner servers for analysis. Because the skill is explicitly about remote tampering detection, the transmission is expected, but it still creates privacy and compliance risk if users upload confidential images or documents.

Static analysis

No suspicious patterns detected.