ClawHub
Back to skill

Security audit

international_draft_ocr

Security checks across malware telemetry and agentic risk

Overview

This OCR skill is purpose-built, but it uploads sensitive financial document files to SCNet without clear runtime consent or privacy and retention guidance.

Install only if you are authorized to send the target drafts, PDFs, images, or archives to SCNet for OCR. Treat uploaded documents as sensitive financial data, verify SCNet's privacy and retention terms, configure the API key in a protected local file, and avoid using this skill on confidential banking or customer documents without explicit approval.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (6)

Lp3

Medium
Category
MCP Least Privilege
Confidence
88% confidence
Finding
The skill documentation indicates the ability to read local files, invoke Python from the shell, and send data over the network, but it does not declare corresponding permissions. That creates a transparency and consent gap: a caller may provide a local document for OCR without clear, machine-readable notice that file contents will be transmitted to a third-party API.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The documentation instructs clients to upload images, PDFs, or archives containing OCR source documents to a third-party endpoint, but it does not provide any warning about privacy, confidentiality, retention, or cross-border disclosure risks. Because this skill is specifically for extracting financial draft/payment information, the transmitted files may contain sensitive commercial and banking data, making omission of disclosure and handling guidance a real security/privacy weakness.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The script uploads the user-supplied file to a third-party OCR service, but at the actual transmission point there is no explicit runtime notice or consent check warning that document contents will leave the local environment. Because this skill processes bills and payment information, the uploaded content may contain sensitive financial data, making silent exfiltration to an external provider a real privacy and compliance risk.

External Transmission

Medium
Category
Data Exfiltration
Content
| 变量名 | 默认值 | 说明 |
|--------|--------|------|
| SCNET_API_KEY | 必需 | Scnet API 密钥 |
| SCNET_API_BASE | https://api.scnet.cn/api/llm/v1 | API 基础地址（一般无需修改） |

### 输出
Confidence
90% confidence
Finding
https://api.scnet.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
# Sugon-Scnet OCR API 文档摘要

## 接口地址
`POST https://api.scnet.cn/api/llm/v1/ocr/recognize`

## 请求头
- `Content-Type: multipart/form-data`
Confidence
91% confidence
Finding
https://api.scnet.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
)
        sys.exit(error_msg)

    config.setdefault('SCNET_API_BASE', 'https://api.scnet.cn/api/llm/v1')
    return config

def recognize_with_retry(ocr_type, file_path, config, retry_count=0):
Confidence
92% confidence
Finding
https://api.scnet.cn/

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.