ClawHub

Image2text Ocr

v1.0.4

将图片中的文字信息识别并提取出来。本技能应在用户需要 OCR 识别图片中的文字时使用。

⭐ 0· 225·0 current·0 all-time
by@scnet-sugon
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
CryptoCan make purchasesRequires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill is an OCR client that calls https://api.scnet.cn/api/llm/v1/ocr/recognize and therefore reasonably needs an SCNET_API_KEY (and optionally SCNET_API_BASE). The only minor inconsistency is that the top-level registry summary in the provided metadata said "Required env vars: none" while the SKILL.md and skill.yaml correctly declare SCNET_API_KEY as required.
✓
Instruction Scope
Runtime instructions and the Python script only read a local config file (config/.env) for the API key, read a user-specified local image file path, and POST that file to the Scnet API. The SKILL.md explicitly instructs where to store the key and warns not to paste it into chat. There are no instructions to read unrelated files, shell history, or to send data to any endpoint other than the declared Scnet API.
✓
Install Mechanism
This is an instruction-only skill with an included Python script; there is no install spec that downloads external archives or runs installers. Dependencies are limited to python3 and the requests library, which is expected for this task.
✓
Credentials
The only credential required is SCNET_API_KEY (primary_credential) and an optional SCNET_API_BASE. That aligns with the stated purpose. No unrelated secrets, system credentials, or config paths are requested. The script reads config/.env and the supplied filePath only.
✓
Persistence & Privilege
The skill does not request always:true and has no install steps that modify other skills or system-wide agent settings. It does not persist credentials beyond reading the .env file in its own directory.
Assessment
This skill appears to do what it claims: it sends a local image file to the Scnet OCR API and prints the JSON result. Before installing, verify you trust the Scnet service (https://www.scnet.cn) and its privacy policy. Store your SCNET_API_KEY securely (use a file with 600 permissions or an environment variable) and do not paste the key into chat. Be aware the skill will read any local file path you provide — avoid sending images that contain sensitive data you don't want uploaded to the external OCR service. Also note the small metadata mismatch (registry summary showed no required env var while the skill requires SCNET_API_KEY); confirm the platform will provide the API key securely or that you will create config/.env as instructed.

Like a lobster shell, security has layers — review code before you run it.

latestvk979rqrv36sqnbbgaj3j2bdbed84whjh

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments