ClawHub
Back to skill

Security audit

health_license_ocr

Security checks across malware telemetry and agentic risk

Overview

This skill performs the advertised health-license OCR task by sending a user-selected document to Scnet's OCR API, with no evidence of hidden persistence or unrelated data access.

Install this only if you are comfortable sending the selected health-license image, PDF, or archive and its filename to Scnet for OCR. Check your organization's policy for third-party document processing, protect the SCNET_API_KEY in config/.env, and avoid using it on documents that require local-only handling.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (6)

Lp3

Medium
Category
MCP Least Privilege
Confidence
88% confidence
Finding
The skill documentation indicates capabilities to read local files, invoke Python from the shell, and transmit data to an external API, but it does not declare corresponding permissions. This creates a transparency and consent problem: users or hosting platforms may not realize that local file contents are being exfiltrated off-device for OCR processing.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The documentation instructs users to upload files to a third-party OCR endpoint and the sample response shows that filenames and document-derived contents are returned and therefore transmitted externally. Because this skill handles health license documents containing business and potentially personal data, failing to clearly disclose external transmission creates a real privacy and compliance risk for users and downstream integrators.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The script uploads the user-specified file to a third-party OCR service, but the operational flow does not present a clear runtime disclosure or consent step that the file contents will leave the local environment. Because卫生许可证 images may contain sensitive business or personal data, this creates a privacy and data-handling risk if users assume processing is local.

External Transmission

Medium
Category
Data Exfiltration
Content
| 变量名 | 默认值 | 说明 |
|--------|--------|------|
| SCNET_API_KEY | 必需 | Scnet API 密钥 |
| SCNET_API_BASE | https://api.scnet.cn/api/llm/v1 | API 基础地址（一般无需修改） |

### 输出
Confidence
91% confidence
Finding
https://api.scnet.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
# Sugon-Scnet OCR API 文档摘要

## 接口地址
`POST https://api.scnet.cn/api/llm/v1/ocr/recognize`

## 请求头
- `Content-Type: multipart/form-data`
Confidence
94% confidence
Finding
https://api.scnet.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
)
        sys.exit(error_msg)

    config.setdefault('SCNET_API_BASE', 'https://api.scnet.cn/api/llm/v1')
    return config

def recognize_with_retry(ocr_type, file_path, config, retry_count=0):
Confidence
91% confidence
Finding
https://api.scnet.cn/

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.