ClawHub
Back to skill

Security audit

ifly-ocr-invoice

Security checks across malware telemetry and agentic risk

Overview

This OCR skill appears to do what it says, but its troubleshooting guide unsafely tells users to print API secrets in full.

Review before installing. The OCR script is purpose-aligned, but do not run the troubleshooting commands that print XFYUN_API_KEY or XFYUN_API_SECRET. Use it only with documents you are allowed to send to iFlytek, and rotate any credentials that were already printed or shared.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Context-Inappropriate Capability

Medium
Confidence
99% confidence
Finding
The troubleshooting section instructs users to print XFYUN_APP_ID, XFYUN_API_KEY, and XFYUN_API_SECRET directly to the terminal. Secrets echoed in plain text can be exposed through terminal scrollback, screen sharing, shell logging, CI logs, or copied transcripts, leading to credential compromise.

Missing User Warnings

Medium
Confidence
99% confidence
Finding
The documentation explicitly exposes commands that reveal OCR API credentials in full without any cautionary note. Because these credentials authorize access to the OCR service, disclosure can enable unauthorized API use, quota exhaustion, billing abuse, and possible access to related account resources.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The script sends the full invoice or receipt image to a third-party OCR service, which can expose sensitive financial and personal data contained in the document. In this skill context, remote processing is expected, but the lack of an explicit user-facing disclosure or confirmation increases privacy risk because users may not realize their documents leave the local machine.

Ssd 3

Medium
Confidence
99% confidence
Finding
Telling users to print all authentication environment variables is a direct secret-disclosure anti-pattern. In the context of an OCR skill that processes invoices and receipts, leaked API credentials could be used by others to submit arbitrary data, consume service quotas, and generate financial or privacy consequences for the account owner.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.