ClawHub
Back to skill

Security audit

social_security_card_ocr

Security checks across malware telemetry and agentic risk

Overview

This skill does what it says: it uploads a user-specified social security card image to SCNet for OCR, with prominent privacy warnings and narrow declared use.

Install only if you are comfortable sending social security card images, which may include identity and bank-card data, to SCNet's remote service. Use it only with authorization from the cardholder, keep SCNET_API_BASE at the default trusted endpoint unless you deliberately intend otherwise, and avoid sharing the API key in chat or logs.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (5)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The script uploads the full contents of a locally supplied file to a remote OCR API, and this skill is specifically for social security cards containing highly sensitive personal data such as names, ID numbers, and social security numbers. There is no explicit runtime consent or user-facing warning immediately before transmission, which creates a meaningful privacy and compliance risk if users do not understand that their document leaves the local environment.

External Transmission

Medium
Category
Data Exfiltration
Content
outbound:
      reason: "仅向 SCNet 第三方 OCR 服务上传图片并获取识别结果。"
      endpoints:
        - "https://api.scnet.cn/api/llm/v1/ocr/recognize"
      restrictions:
        - "仅允许访问 SCNET_API_BASE 配置的 API 基础地址。"
        - "禁止访问其他外部网络端点或代理转发。"
Confidence
91% confidence
Finding
https://api.scnet.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
| 变量名         | 默认值                               | 说明           |
|----------------|--------------------------------------|----------------|
| SCNET_API_KEY  | 必需                                 | Scnet API 密钥 |
| SCNET_API_BASE | `https://api.scnet.cn/api/llm/v1`    | API 基础地址   |

### 输出
Confidence
84% confidence
Finding
https://api.scnet.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
> 🚨 **隐私与安全提示**：该接口会将您上传的证件图片传输至第三方服务商 `api.scnet.cn` 进行识别。图片中包含姓名、身份证号、社会保障号码、银行卡号等高度敏感的个人信息。请在确保已获得信息主体授权、且理解数据外传风险后再使用。识别完成后，建议立即删除本地图片及任何缓存副本。

## 接口地址
`POST https://api.scnet.cn/api/llm/v1/ocr/recognize`

## 请求头
- `Content-Type: multipart/form-data`
Confidence
94% confidence
Finding
https://api.scnet.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
sys.exit(error_msg)

    # 显式固定默认 API 基础地址，避免环境变量被篡改为其他端点
    config['SCNET_API_BASE'] = config.get('SCNET_API_BASE', 'https://api.scnet.cn/api/llm/v1')
    return config

def validate_ocr_type(ocr_type):
Confidence
97% confidence
Finding
https://api.scnet.cn/

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.