ClawHub

夸克扫描王 OCR文字识别 - yescan ocr universal

v1.0.9

由夸克扫描王提供的专业 OCR 文字识别与处理工具。支持图片、截图、扫描件中的文字提取，包括手写文档、表格内容、数学公式、商品图片等复杂场景。精准识别各类证件（身份证、社保卡、驾驶证、行驶证、港澳通行证、学位证等证件）及票据（增值税发票、火车票、英文发票等票据），同时支持医疗报告单、营业执照、习题题目等专业文档识别。

⭐ 3· 442·2 current·2 all-time
by夸克扫描王@mozhihuidage
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, required binary (python3), declared environment variable (SCAN_WEBSERVICE_KEY), and included client code all align with an OCR-as-a-service integration that posts images to scan-business.quark.cn. No unrelated credentials or binaries are requested.
ℹ
Instruction Scope
The runtime instructions and code accept an image via URL, local file path, or base64 and will send the image data to the remote API. This matches the stated purpose, but it does mean any local file path supplied will be read, base64-encoded, and transmitted to the remote service; returned files (images/docs) may be written to the system temp directory. The SKILL.md explicitly warns about remote transmission. Users should be aware this is expected behavior and a potential data-exfiltration vector if sensitive local files are provided.
✓
Install Mechanism
No install spec is provided (instruction-only behavior plus bundled Python scripts). Nothing is downloaded from remote URLs at install time; the code runs with python3 already on PATH. This is low-risk from an install perspective.
✓
Credentials
Only a single credential (SCAN_WEBSERVICE_KEY) is required and is declared as the primary credential. That is proportional for a hosted OCR API. No unrelated secrets or config paths are requested.
✓
Persistence & Privilege
always is false, the skill is user-invocable and can be called autonomously (platform default). The skill does write returned artifacts to the system temp directory but does not request persistent agent-wide privileges or modify other skills.
Assessment
This skill will read the image you provide (including local files you pass by path), encode it, and send it to Quark's API at scan-business.quark.cn for processing — so do not upload sensitive documents unless you trust the service and have reviewed its privacy/retention policy. Keep your SCAN_WEBSERVICE_KEY secret (store it in a secure vault), and restrict where you run this skill (avoid pointing it at arbitrary local paths). Be aware returned files are saved to the system temporary directory; periodically review or clean that directory. If you need stronger guarantees about data residency or retention, contact the service provider or avoid using the remote API.

Like a lobster shell, security has layers — review code before you run it.

latestvk979xmje83nyj5h697sxrq7mvs84zps7

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🔍︎ Clawdis
Binspython3
EnvSCAN_WEBSERVICE_KEY
Primary envSCAN_WEBSERVICE_KEY

Comments