ClawHub
Back to skill

Security audit

PDF和图片文字提取

Security checks across malware telemetry and agentic risk

Overview

This is a normal OCR/text-extraction skill, with minor documentation gaps around when extracted text may be saved.

Install is reasonable for OCR and PDF text extraction. Use it only on documents you intend to process, and avoid saving extracted Markdown for sensitive contracts, IDs, medical records, or confidential business files unless workspace retention is acceptable.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Intent-Code Divergence

Medium
Confidence
94% confidence
Finding
The skill states that processed files are not stored, yet elsewhere instructs the agent to generate and optionally save Markdown output files. This creates a misleading privacy guarantee that can cause sensitive document contents to be persisted unexpectedly, increasing exposure through local storage, logs, backups, or later retrieval.

Vague Triggers

Medium
Confidence
84% confidence
Finding
The README says users can trigger the skill by simply describing what they need in natural language, with examples like 'extract the text' and 'convert this PDF to text.' That broad activation guidance can cause unintended invocation by an agent or orchestration layer that matches loosely on user phrasing, potentially processing sensitive uploaded files when the user did not intend to invoke this exact skill.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The skill advertises 'Save the extracted text' and states it generates a Markdown file, but provides no warning about file creation, storage location, retention, or handling of potentially sensitive extracted content. Because OCR/PDF text often contains private or regulated data, silent persistence increases the risk of unintended data retention, disclosure, or downstream access by other tools or users.

VirusTotal

61/61 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.