ClawHub
Back to skill

Security audit

讯飞票据识别

Security checks across malware telemetry and agentic risk

Overview

The skill appears to do the advertised invoice OCR, but its troubleshooting instructions can expose the user’s API secrets.

Review before installing. Use it only for invoices or bills you are comfortable sending to iFlytek, and do not run or share the troubleshooting commands that print XFEI_API_KEY or XFEI_API_SECRET. Prefer presence-only or masked checks for those environment variables.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
98% confidence
Finding
The troubleshooting guidance tells users to echo XFEI_APP_ID, XFEI_API_KEY, and XFEI_API_SECRET directly to the terminal. This exposes secrets on screen and can leak them through terminal recording, screenshots, shared sessions, logs, or support transcripts; in some environments, users may also paste the output into tickets or chats.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The script base64-encodes the entire invoice image and transmits it to a third-party OCR endpoint, but it does not provide any user-facing disclosure that sensitive financial and personal data will leave the local environment. Because invoices, receipts, and medical or bank bills can contain PII, account details, and financial records, this creates a real privacy and compliance risk even though the transmission is the intended feature of the skill.

Ssd 3

High
Confidence
99% confidence
Finding
The documentation explicitly instructs users to print all authentication environment variables in plaintext, including the API secret. Credential disclosure enables unauthorized use of the OCR account, quota exhaustion, billing abuse, and potential compromise of any data accessible through that account.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.