Ocr Local 1.0.0

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:38 PM UTC
• Version:
  1.0.0

Overview

This OCR skill appears purpose-aligned and locally processes user-provided images, but users should know the first run may download Tesseract language files.

Install this if you are comfortable with npm dependencies and a first-run download of OCR language files. For offline or tightly controlled environments, pre-provision the Tesseract language data and install from the included lockfile or pin the dependency exactly before use.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Description-Behavior Mismatch

Medium

• Confidence: 90% confidence
• Finding: The documentation promises the OCR skill is '100% local' and requires no API key, but the publish notes explicitly state that Tesseract language data is downloaded automatically at runtime. This is a security-relevant discrepancy because users may install the skill under the assumption that it performs no network activity, when in fact it fetches code/data from external sources on first run.

Intent-Code Divergence

Medium

• Confidence: 94% confidence
• Finding: The feature list states the skill is 'purely local', while the first-run note admits automatic download of language data. This inconsistency can mislead users in restricted or high-trust environments where any outbound network access is prohibited, and it obscures the supply-chain and privacy implications of fetching runtime assets.

Description-Behavior Mismatch

Medium

• Confidence: 93% confidence
• Finding: The skill advertises "100% local" operation, but its own notes state that the first run downloads language data. This is a security-relevant documentation integrity issue because users may rely on the claim to make trust, privacy, or network-isolation decisions, and the hidden network dependency can violate those assumptions.

Intent-Code Divergence

Medium

• Confidence: 95% confidence
• Finding: The documentation repeats a misleading "100% local run" statement while later acknowledging first-run downloads, creating an internal contradiction. In a security-sensitive context, this can cause operators to execute the skill in environments where outbound network access is disallowed or where external downloads introduce supply-chain and privacy risks.

VirusTotal

66/66 vendors flagged this skill as clean.