ClawHub
Back to skill

Security audit

eKYC Suite Document OCR

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed OCR client for user-provided identity and card images, with sensitive-data handling risks that users must manage but no evidence of hidden or unrelated behavior.

Install only if you have authority to process the submitted documents, trust the configured eKYC cloud endpoint, and have policies for consent, retention, access control, masking, and human review. Avoid setting optional context environment variables unless they are needed for your deployment.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill explicitly processes highly sensitive identity-document images and extracts structured personal data, but the documentation does not warn users about privacy risks, data sensitivity, retention, or handling obligations. In a KYC/eKYC context, this omission can lead to unsafe use, over-collection, or accidental exposure of regulated personal information such as ID numbers, names, and license details.

Missing User Warnings

Medium
Confidence
84% confidence
Finding
This skill transmits highly sensitive document images and several environment-derived identifiers to a remote cloud service, but the code itself provides no runtime disclosure, consent prompt, or data-minimization guardrails. In a KYC/OCR context, this materially increases privacy and compliance risk because operators may not realize exactly what personal data and metadata are being sent off host.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.potential_exfiltration

Python code base64-encodes a local file and sends it over the network.

Critical
Code
suspicious.potential_exfiltration
Location
scripts/document_ocr.py:39