Security checks across malware telemetry and agentic risk
This appears to be a real screen capture and OCR skill, but it needs review because it can monitor sensitive screen contents and includes a Windows installer flow that downloads and silently runs an external OCR binary without integrity verification.
Install only if you trust the publisher and are comfortable granting screen-capture capability. Prefer manual, verified Tesseract installation over the automatic Windows installer, avoid running the scripts as administrator unless necessary, use explicit capture regions and output paths, and delete saved screenshots/OCR text/logs that may contain sensitive information.
# 检查环境变量
try:
result = subprocess.run(
"tesseract --version",
shell=True,
capture_output=True,print("正在安装，请稍候...")
# 运行安装程序
result = subprocess.run(
install_command,
shell=True,
capture_output=True,print(f"命令: {cmd}")
try:
result = subprocess.run(
cmd,
shell=True,
capture_output=True,# 运行测试代码
try:
exec(test_code)
return True
except Exception as e:
print(f"❌ 验证失败: {e}")64/64 vendors flagged this skill as clean.