MiniCPM-OCR Document Parsing and Deployment

• Outcome: Pass
• Latest audit: Nov 11, 2026 · 3:55 PM UTC
• Version: 1.0.0

Overview

ClawScan rates this skill benign with medium confidence: the reported findings are consistent with documented setup guidance, though some referenced files were unavailable for review.

The verdict is benign, not a guarantee of zero risk. Before installing, consider whether you are comfortable following setup instructions that use sudo to add system dependencies. Review the commands and referenced materials yourself where possible: Skillspector’s analysis was partial because many local references could not be resolved, so some evidence is incomplete.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (18)

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · SKILL.md (reported line 565)May include surrounding context.

md

|---|---|
| `POST /api/document-parse/jobs` | Async image or PDF. HTTP 200 returns a job |
| `GET /api/document-parse/jobs/{id}` | HTTP 200 returns progress and results |
| `DELETE /api/document-parse/jobs/{id}` | Cancel the job. HTTP 200 returns the job status |
| `POST /api/kie` | Sync single image. HTTP 200 returns one page |

Document parsing creates a job for both images and PDFs. The response `status` is `Running`. Key information extraction uses `POST /api/kie` and accepts one image: a JSON body with `image` and `fields`. That call does not create a job and does not accept a PDF. The async form of key information extraction can be adapted by following document parsing.

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/SKILL_zh.md (reported line 565)May include surrounding context.

md

|---|---|
| `POST /api/document-parse/jobs` | 异步图片或 PDF，HTTP 200 返回任务 |
| `GET /api/document-parse/jobs/{id}` | HTTP 200 返回进度与结果 |
| `DELETE /api/document-parse/jobs/{id}` | 取消任务，HTTP 200 返回任务状态 |
| `POST /api/kie` | 同步单图，HTTP 200 返回单页响应 |

文档解析的图片和 PDF 都创建任务，响应里 `status` 为 `Running`。关键信息抽取走 `POST /api/kie`，只接受单张图片：JSON 请求体带 `image` 和 `fields`。这一路不创建任务，也不接收 PDF。关键信息抽取的异步形式可以参照文档解析进行改造。

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 100)May include surrounding context.

Ubuntu system dependencies (install with appropriate permissions or ask the administrator to provide them):

bash

sudo apt-get update
sudo apt-get install -y software-properties-common build-essential git curl ca-certificates
sudo add-apt-repository -y ppa:ubuntu-toolchain-r/test
sudo apt-get update

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 103)May include surrounding context.

sudo apt-get update sudo apt-get install -y software-properties-common build-essential git curl ca-certificates sudo add-apt-repository -y ppa:ubuntu-toolchain-r/test sudo apt-get update sudo apt-get install -y gcc-13 g++-13 libdw-dev libelf-dev bash scripts/install.sh vllm

text

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 235)May include surrounding context.

On Ubuntu, install build dependencies first:

bash

sudo apt-get update
sudo apt-get install -y cmake build-essential git curl ca-certificates

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · references/SKILL_zh.md (reported line 100)May include surrounding context.

Ubuntu 系统依赖（具有相应权限时执行，否则由管理员安装）：

bash

sudo apt-get update
sudo apt-get install -y software-properties-common build-essential git curl ca-certificates
sudo add-apt-repository -y ppa:ubuntu-toolchain-r/test
sudo apt-get update

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · references/SKILL_zh.md (reported line 101)May include surrounding context.

bash

sudo apt-get update
sudo apt-get install -y software-properties-common build-essential git curl ca-certificates
sudo add-apt-repository -y ppa:ubuntu-toolchain-r/test
sudo apt-get update
sudo apt-get install -y gcc-13 g++-13 libdw-dev libelf-dev

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · references/SKILL_zh.md (reported line 150)May include surrounding context.

先安装第 4 节列出的 APT 编译依赖（跳过其中的 bash scripts/install.sh vllm，不安装 vLLM），再补齐 SGLang 所需工具：

bash

sudo apt-get install -y pkg-config libssl-dev protobuf-compiler
mkdir -p sources
SGLANG_COMMIT=aaab6bfc3de5354b052f2e96d5e566d70b9f69a2
if [ ! -e sources/sglang ]; then

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · references/SKILL_zh.md (reported line 235)May include surrounding context.

Ubuntu 上先准备编译依赖：

bash

sudo apt-get update
sudo apt-get install -y cmake build-essential git curl ca-certificates

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · references/SKILL_zh.md (reported line 236)May include surrounding context.

bash

sudo apt-get update
sudo apt-get install -y cmake build-essential git curl ca-certificates

macOS 上检查 Command Line Tools；若未安装，执行 xcode-select --install 并等安装完成。用 Homebrew 准备 CMake：

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 101)May include surrounding context.

bash

sudo apt-get update
sudo apt-get install -y software-properties-common build-essential git curl ca-certificates
sudo add-apt-repository -y ppa:ubuntu-toolchain-r/test
sudo apt-get update
sudo apt-get install -y gcc-13 g++-13 libdw-dev libelf-dev

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 150)May include surrounding context.

Install the APT build dependencies from section 4 (skip bash scripts/install.sh vllm; do not install vLLM), then add SGLang's tools:

bash

sudo apt-get install -y pkg-config libssl-dev protobuf-compiler
mkdir -p sources
SGLANG_COMMIT=aaab6bfc3de5354b052f2e96d5e566d70b9f69a2
if [ ! -e sources/sglang ]; then

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 236)May include surrounding context.

bash

sudo apt-get update
sudo apt-get install -y cmake build-essential git curl ca-certificates

On macOS, check Command Line Tools; if missing, run xcode-select --install and wait for installation to finish. Install CMake with Homebrew:

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · references/SKILL_zh.md (reported line 103)May include surrounding context.

sudo apt-get update sudo apt-get install -y software-properties-common build-essential git curl ca-certificates sudo add-apt-repository -y ppa:ubuntu-toolchain-r/test sudo apt-get update sudo apt-get install -y gcc-13 g++-13 libdw-dev libelf-dev bash scripts/install.sh vllm

text

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 102)May include surrounding context.

bash

sudo apt-get update
sudo apt-get install -y software-properties-common build-essential git curl ca-certificates
sudo add-apt-repository -y ppa:ubuntu-toolchain-r/test
sudo apt-get update
sudo apt-get install -y gcc-13 g++-13 libdw-dev libelf-dev
bash scripts/install.sh vllm

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · references/SKILL_zh.md (reported line 102)May include surrounding context.

bash

sudo apt-get update
sudo apt-get install -y software-properties-common build-essential git curl ca-certificates
sudo add-apt-repository -y ppa:ubuntu-toolchain-r/test
sudo apt-get update
sudo apt-get install -y gcc-13 g++-13 libdw-dev libelf-dev
bash scripts/install.sh vllm

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 104)May include surrounding context.

sudo apt-get install -y software-properties-common build-essential git curl ca-certificates sudo add-apt-repository -y ppa:ubuntu-toolchain-r/test sudo apt-get update sudo apt-get install -y gcc-13 g++-13 libdw-dev libelf-dev bash scripts/install.sh vllm

text

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · references/SKILL_zh.md (reported line 104)May include surrounding context.

sudo apt-get install -y software-properties-common build-essential git curl ca-certificates sudo add-apt-repository -y ppa:ubuntu-toolchain-r/test sudo apt-get update sudo apt-get install -y gcc-13 g++-13 libdw-dev libelf-dev bash scripts/install.sh vllm

text