CamScanner

• Outcome: Review
• Latest audit: Aug 7, 2026 · 11:38 AM UTC
• Version: 0.1.0

Overview

The skill is mostly coherent for CamScanner document processing, but it should be reviewed because it installs a downloaded CLI into PATH without integrity verification and frequently steers sensitive document results to cloud storage.

Install only if you trust CamScanner and are comfortable sending document contents to its servers. Avoid pipe-to-shell installation, prefer a reviewed installer with checksum or signature verification, use local outputs for sensitive files, use -s only when you intentionally want CamScanner cloud storage, and keep originals before watermark removal or image text edits.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration

Findings (13)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 96% confidence
• Finding: The skill clearly instructs the agent to execute shell commands and even install a CLI, but the metadata does not declare corresponding permissions. That mismatch weakens the trust boundary for users and policy engines because the skill can trigger local command execution without explicit permission signaling.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 95% confidence
• Finding: The description frames the skill as document processing, but the body also directs users to download and install a binary, modify PATH-reachable locations, and perform authentication flows. This expanded behavior changes the security posture substantially because it introduces software supply-chain and local system modification risks that are not disclosed in the declared purpose.

Vague Triggers

Medium

• Confidence: 84% confidence
• Finding: The invocation description is extremely broad and covers many generic document-processing terms, which can cause the skill to activate in contexts where the user did not specifically intend to use CamScanner. Unintended activation matters here because the skill can lead to file uploads, authentication prompts, and local command execution.

Missing User Warnings

Medium

• Confidence: 87% confidence
• Finding: The document provides powerful image edit and delete workflows, including text replacement, area deletion, and movement, but does not warn that these actions can materially alter source documents or produce irreversible changes. In a document-processing skill, this can facilitate accidental falsification, evidence tampering, or destructive overwrites if users are not clearly prompted to preserve originals and confirm edits.

Missing User Warnings

Low

• Confidence: 93% confidence
• Finding: The reference advertises watermark removal as an enhancement mode without any caution about ownership, authenticity, or legal restrictions. Because watermarks are often used to indicate copyright, provenance, or confidentiality, documenting removal as a routine feature can enable misuse to strip attribution or alter the apparent legitimacy of content.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The documentation encourages use of the `-s` cloud-save option for PDF page exports without warning that document contents are uploaded to CamScanner's remote service. Users may unknowingly send sensitive or regulated document data off-device, creating privacy, confidentiality, and compliance risk, especially for business or personal records.

Missing User Warnings

Low

• Confidence: 87% confidence
• Finding: The watermark removal command is presented as a normal operation without warning that it alters document contents and can remove visible provenance, classification, or ownership markings. If users save the result back to cloud storage or replace expected copies, this can lead to accidental misuse of modified documents and loss of integrity signals.

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: Several quick-reference commands prominently use `-s` to save outputs to the CamScanner cloud, but the documentation does not clearly warn that document contents and images may leave the local device and be uploaded to a remote service. In a document-processing skill, users may run these examples on sensitive scans, contracts, IDs, or invoices and unintentionally disclose private data.

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: The translation workflow shows `image translate ... -s` without warning that translation and save operations may transmit document text and images to a service for processing and storage. Because translation commonly involves full document content, this can expose confidential or regulated information if users assume the workflow is local-only.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The workflow instructs saving the final result to CamScanner cloud using `-s` but does not warn that potentially sensitive document images will be uploaded or stored remotely. Because this skill processes personal and business documents, users may unintentionally expose confidential data if cloud storage is used by default or suggested without clear consent and retention guidance.

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: The workflow explicitly recommends `image merge-word -s` to save extracted document content directly as a cloud document, but it does not warn that potentially sensitive OCR content will be transmitted to and stored in CamScanner cloud storage. For a document-processing skill, users may submit IDs, contracts, medical records, or financial documents, so omission of a storage/transmission warning can lead to unintended data disclosure and privacy/compliance issues.

External Script Fetching

High

• Category: Supply Chain

Content

#
# Usage:
#   bash scripts/setup.sh
#   curl -fsSL <CDN>/setup.sh | sh
#
# Environment variables (all optional):
#   CAMSCANNER_CLI_VERSION - version to install (default: read from SKILL.md or "latest")

• Confidence: 98% confidence
• Finding: curl -fsSL <CDN>/setup.sh | sh

Chaining Abuse

High

• Category: Tool Misuse

Content

#
# Usage:
#   bash scripts/setup.sh
#   curl -fsSL <CDN>/setup.sh | sh
#
# Environment variables (all optional):
#   CAMSCANNER_CLI_VERSION - version to install (default: read from SKILL.md or "latest")

• Confidence: 99% confidence
• Finding: | sh

VirusTotal

VirusTotal findings are pending for this skill version.

Static analysis

Detected: suspicious.dangerous_exec

Shell command execution detected (child_process).

Critical

• Code: suspicious.dangerous_exec
• Location: scripts/setup.cjs:88