ClawHub
Back to skill

Security audit

bill_of_lading_ocr

Security checks across malware telemetry and agentic risk

Overview

This skill appears to be a legitimate bill-of-lading OCR wrapper, but it uploads sensitive local shipping documents to an external API without a clear pre-upload consent step.

Install only if you are comfortable sending bill-of-lading files to Scnet's remote OCR service. Use it on documents you are authorized to upload, review the provider's data-handling terms, avoid pasting API keys into chat, and consider requiring explicit confirmation before each OCR upload.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (6)

Lp3

Medium
Category
MCP Least Privilege
Confidence
88% confidence
Finding
The skill documentation indicates capabilities to read local files, invoke Python via shell, and send data over the network, yet no explicit permissions are declared. This creates a real security governance gap because users and hosting platforms cannot accurately assess that local document contents may be transmitted to an external OCR service.

Vague Triggers

Medium
Confidence
82% confidence
Finding
The skill says the AI may auto-trigger based on description keywords, without requiring strong user confirmation or narrowly scoped trigger conditions. In context, this is risky because a user mentioning a local file path or bill-of-lading document could cause unintended execution that reads a local file and transmits potentially sensitive shipping data to an external API.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The document instructs users to upload files containing bills of lading and related shipping records to a third-party OCR endpoint, but it provides no warning that these files may contain sensitive commercial or personal data. In this skill context, the uploaded content can include consignee/exporter identities, shipment routing, and document numbers, so omission of a data-transmission warning creates a real privacy and confidentiality risk.

External Transmission

Medium
Category
Data Exfiltration
Content
| 变量名 | 默认值 | 说明 |
|--------|--------|------|
| SCNET_API_KEY | 必需 | Scnet API 密钥 |
| SCNET_API_BASE | https://api.scnet.cn/api/llm/v1 | API 基础地址（一般无需修改） |

### 输出
Confidence
90% confidence
Finding
https://api.scnet.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
# Sugon-Scnet OCR API 文档摘要

## 接口地址
`POST https://api.scnet.cn/api/llm/v1/ocr/recognize`

## 请求头
- `Content-Type: multipart/form-data`
Confidence
85% confidence
Finding
https://api.scnet.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
)
        sys.exit(error_msg)

    config.setdefault('SCNET_API_BASE', 'https://api.scnet.cn/api/llm/v1')
    return config

def recognize_with_retry(ocr_type, file_path, config, retry_count=0):
Confidence
94% confidence
Finding
https://api.scnet.cn/

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.