ClawHub
Back to skill

Security audit

online_car_hailing_itinerary_ocr

Security checks across malware telemetry and agentic risk

Overview

This skill performs the advertised OCR task by sending a user-selected ride-hailing itinerary file to SCNet's OCR API, with no hidden persistence or unrelated behavior found.

Install only if you are comfortable sending ride-hailing itinerary images or PDFs, which may include phone numbers, pickup/drop-off locations, trip times, and fare details, to SCNet's OCR service. Keep the API key out of chat, protect config/.env with restrictive permissions, and leave SCNET_API_BASE at the documented HTTPS endpoint unless you intentionally trust another endpoint.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Lp3

Medium
Category
MCP Least Privilege
Confidence
92% confidence
Finding
The skill documentation indicates capabilities to read local files, invoke Python from the shell, and send data over the network, but it does not declare permissions or clearly scope those capabilities. This can lead to overbroad agent execution where local user files are transmitted to a third-party API without an explicit permission boundary or user consent model.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The document instructs users to upload files containing OCR source documents to a third-party API and shows that the response can include sensitive personal data such as passenger phone numbers, trip times, locations, and fare details. It does not warn about external data transmission, third-party processing, retention, or privacy/compliance implications, which can lead to unintentional disclosure of personal or confidential travel records.

External Transmission

Medium
Category
Data Exfiltration
Content
# Sugon-Scnet OCR API 文档摘要

## 接口地址
`POST https://api.scnet.cn/api/llm/v1/ocr/recognize`

## 请求头
- `Content-Type: multipart/form-data`
Confidence
88% confidence
Finding
https://api.scnet.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
)
        sys.exit(error_msg)

    config.setdefault('SCNET_API_BASE', 'https://api.scnet.cn/api/llm/v1')
    return config

def recognize_with_retry(ocr_type, file_path, config, retry_count=0):
Confidence
94% confidence
Finding
https://api.scnet.cn/

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.