Ocr Local Rose
v1.0.0Extract text from images using Tesseract.js OCR (100% local, no API key required). Supports Chinese (simplified/traditional) and English.
⭐ 0· 201·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is an OCR wrapper around tesseract.js. Required binary (node) and the dependency (tesseract.js) are exactly what you'd expect for a Node-based local OCR tool. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
The SKILL.md and scripts/ocr.js are consistent: the script reads a single user-supplied local image, performs OCR, and prints results or JSON. It stores downloaded language data under scripts/tessdata/. Runtime behavior includes network downloads of language model files on first run (or manual curl to jsdelivr as documented). This network activity is expected for the stated purpose but is worth noting: images are not uploaded by the script, only language model files are fetched.
Install Mechanism
There is no automated install specification in the registry metadata (instruction-only), but package.json declares tesseract.js as a dependency so npm install is expected. The package-lock shows dependencies resolved via a public npm mirror (registry.npmmirror.com) — a mirror is traceable but not the primary npm registry. Overall the install approach (npm dependency) is proportionate to the task.
Credentials
No environment variables, secrets, or external credentials are requested. The tool only needs filesystem access to the image and to write cached language files under its own scripts/tessdata/ directory.
Persistence & Privilege
The skill is not always-on and is user-invocable. It only creates/uses a tessdata cache directory inside its own script folder and does not modify other skills or global agent settings.
Assessment
This skill appears to do what it says: a local Node script that uses tesseract.js to OCR local images. Before installing, consider: 1) npm install will download tesseract.js and its transitive packages (package-lock references a public mirror); if you want full control, run npm install yourself and/or use the official npm registry. 2) First run will download ~20MB per language model from a CDN (SKILL.md suggests jsdelivr) — if you prefer no runtime network activity, pre-download the .traineddata files into scripts/tessdata/ using the provided curl commands. 3) The script processes only local files (it does not upload images), but verify network egress policies if you are in a sensitive environment. 4) If you want extra assurance, review tesseract.js and its tesseract.js-core package versions listed in package.json/package-lock before installing.Like a lobster shell, security has layers — review code before you run it.
latestvk979evkba5whmk4g69x78xtd0183n1nc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📝 Clawdis
Binsnode