Ocr Local 1.0.0
v1.0.0Extract text from images using Tesseract.js OCR (100% local, no API key required). Supports Chinese (simplified/traditional) and English.
⭐ 0· 56·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (local OCR with Tesseract.js) match the code, package.json dependency, and SKILL.md. The single script calls Tesseract.recognize on a local file and outputs text/JSON; requiring node and tesseract.js is expected.
Instruction Scope
SKILL.md instructs running the included Node script with expected CLI flags. The runtime instructions do not ask the agent to read unrelated files, access secrets, modify system settings, or call external endpoints beyond the expected language-data download noted in the docs.
Install Mechanism
No custom install spec in the registry, but SKILL.md and package.json expect npm install (tesseract.js). Installing via npm will fetch packages from the public registry and run any package lifecycle scripts (tesseract.js and its deps include an install script/opencollective-postinstall). This is normal for Node packages but means code from the npm registry will be written to disk and run during install.
Credentials
No environment variables, credentials, or config paths are required. The skill does not request unrelated secrets or broad system access.
Persistence & Privilege
always is false, the skill is user-invocable and does not request permanent or system-wide privileges. It does not modify other skills or agent-wide configuration.
Assessment
This skill appears coherent and does what it claims: it runs Tesseract.js locally on a provided image. Before installing, be aware that (1) npm install will download tesseract.js and its dependencies from the public registry and may run package lifecycle scripts (opencollective-postinstall is present in deps) — run npm install in a controlled environment or inspect dependencies if you are cautious; (2) Tesseract language data will be downloaded on first run (~20MB/language) so the process needs network access unless you pre-provision the traineddata files; (3) there is no credential or secret access requested. If you want maximum safety, audit the tesseract.js package and its postinstall behavior, or vendor the dependency and the language files yourself and run the script offline. Additionally, note a minor metadata inconsistency (ownerId differs between registry metadata and _meta.json) — likely benign but worth noticing.Like a lobster shell, security has layers — review code before you run it.
latestvk97fxw5d8wqgqtyq46yzyz7zh184rgm6
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📝 Clawdis
Binsnode