Business License Ocr
v1.0.4精准识别中国大陆本营业执照。自动提取统一社会信用代码、企业名称、法定代表人、注册资本、成立日期、经营范围、住所等信息。
⭐ 0· 112·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (business license OCR) match the implemented behavior: the Python script uploads a local file to https://api.scnet.cn/api/llm/v1/ocr/recognize and prints structured JSON. Requiring SCNET_API_KEY/SCNET_API_BASE is appropriate. Minor metadata mismatch: the registry summary at the top claimed 'Required env vars: none', but both SKILL.md and skill.yaml correctly declare SCNET_API_KEY (primary credential). This appears to be an artefact of registry extraction, not a functional mismatch.
Instruction Scope
SKILL.md and scripts only ask the agent to read a local image path and a local config/.env (or environment variable) and then call the Scnet OCR API — scope is limited to OCR. Small scope-creep items: usage examples mention identifying ID cards and invoices even though the script's usage text and documentation focus on BUSINESS_LICENSE (the code accepts a generic ocrType but CLI help suggests BUSINESS_LICENSE). This is a documentation inconsistency but not evidence of hidden behavior. The SKILL.md also instructs creating config/.env and warns not to paste API keys into chat (good).
Install Mechanism
No install spec is provided; the skill ships a small Python script and expects python3 + requests. Nothing is downloaded from arbitrary URLs or executed from remote archives. This is low-risk for installation.
Credentials
Only SCNET_API_KEY (and optional SCNET_API_BASE) are required to operate, which is proportional for a cloud OCR wrapper. The script reads config/.env under its own skill directory — it does not request unrelated credentials or other system config paths.
Persistence & Privilege
always: false and disable-model-invocation left default (normal). The skill does not request permanent system-wide privileges, does not modify other skills, and does not persist tokens outside its own config/.env file. No elevated privileges requested.
Assessment
This skill is a thin wrapper around the Scnet OCR API and requires you to provide an SCNET_API_KEY (stored in config/.env or an environment variable). Before installing: 1) confirm you trust the Scnet service (https://www.scnet.cn) and understand that image data will be uploaded to that service; 2) store the API key in a file with restricted permissions (the README recommends chmod 600) or use environment variables; 3) note the small documentation inconsistency where example usage mentions other document types — double-check the ocrType you pass. If you don't want files uploaded to an external service, do not install/use this skill.Like a lobster shell, security has layers — review code before you run it.
latestvk97ch19wqykr8t4qyghtkyp5hs84w1a0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.