Image Reader
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill's requirements, code, and runtime instructions align with an OCR reader: it runs local OCR using RapidOCR, asks no unrelated credentials, and does not appear to perform unexpected file access or network exfiltration.
This skill appears to be what it claims: a local OCR reader. Before installing, consider: (1) the pip packages (rapidocr, onnxruntime) will be installed and may download model files from the internet on first run—review the package source and where it pulls models from if you need to trust the host; (2) run the tool in a virtual environment or isolated environment if you are concerned about third-party packages; (3) the script processes images locally and does not itself transmit images to external services, but verify network activity of the rapidocr package if you need to ensure full offline operation; (4) avoid feeding sensitive images until you confirm where model assets come from and whether any telemetry is enabled by the upstream packages.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
No visible risk-analysis findings were reported for this release.