ClawHub
Back to skill

Security audit

CamScanner Image HD

Security checks for vulnerabilities and agentic risk

Overview

This skill clearly describes uploading a chosen image to CamScanner for enhancement and downloading the result, with the main risk being third-party handling of image contents.

Install only if you are comfortable sending selected images to CamScanner servers. Avoid sensitive IDs, medical, legal, financial, or private business documents unless CamScanner's privacy and retention terms meet your needs, and confirm the exact input and output paths before running the pipeline.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
80% confidence
Finding
The skill's trigger language is broad enough to activate on generic requests like improving image quality or making an image clearer, which can cause the tool to be selected when a user did not intend to send files to a third-party service. Because this skill uploads user-provided images to CamScanner servers, unintended invocation increases privacy and consent risk beyond a normal local-only image enhancement action.

External Transmission

Medium
Category
Data Exfiltration
Content
```bash
BASE="https://ai-tools.camscanner.com"

IN_FILE_ID=$(curl -sS -X POST "$BASE/v1/tools/upload_file/execute" \
  -H "Content-Type: application/octet-stream" \
  --data-binary "@/path/to/image.png" | jq -r '.tool_result.data.file_id')
```
Confidence
92% confidence
Finding
This step uploads a local image file to an external CamScanner endpoint, which is a genuine data exfiltration boundary even if it is the intended product behavior. The risk is amplified because images and scanned documents frequently contain sensitive personal or business information, and the skill relies on a third-party privacy claim rather than enforcing technical safeguards.

Static analysis

No suspicious patterns detected.