ClawHub
Back to skill

Security audit

tax_registration_certificate_ocr

Security checks across malware telemetry and agentic risk

Overview

This skill does what it claims, but it uploads sensitive tax certificate files to an external OCR service with limited privacy and scoping guidance.

Install only if you are comfortable sending tax registration certificate files to Scnet's OCR service. Review the provider's privacy and retention terms, avoid uploading unnecessary or highly sensitive documents, protect config/.env with restrictive permissions, and be cautious if SCNET_API_BASE is changed from the documented HTTPS endpoint.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (6)

Lp3

Medium
Category
MCP Least Privilege
Confidence
88% confidence
Finding
The skill documentation indicates capabilities to read local files, invoke Python from the shell, and send data over the network, but it does not declare permissions or clearly bound those capabilities. This creates a real security gap because an orchestrator or reviewer cannot easily assess that local document contents will be transmitted to an external OCR provider.

Missing User Warnings

Medium
Confidence
87% confidence
Finding
The README is effectively a stock GitLab template and does not document what the skill does, what data it processes, or any privacy/security limitations. For a skill handling tax registration certificate OCR, this omission is risky because users may unknowingly submit sensitive business or identity data without guidance on retention, redaction, access controls, or safe operating constraints.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The documentation instructs clients to upload files containing tax registration certificate data to a third-party OCR endpoint, but it provides no warning that sensitive documents and extracted personal/company information will be transmitted off-platform. Because tax certificates commonly contain names, addresses, registration numbers, and other regulated business data, lack of disclosure and consent controls creates a real privacy and data-handling risk.

External Transmission

Medium
Category
Data Exfiltration
Content
| 变量名 | 默认值 | 说明 |
|--------|--------|------|
| SCNET_API_KEY | 必需 | Scnet API 密钥 |
| SCNET_API_BASE | https://api.scnet.cn/api/llm/v1 | API 基础地址（一般无需修改） |

### 输出
Confidence
91% confidence
Finding
https://api.scnet.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
# Sugon-Scnet OCR API 文档摘要

## 接口地址
`POST https://api.scnet.cn/api/llm/v1/ocr/recognize`

## 请求头
- `Content-Type: multipart/form-data`
Confidence
91% confidence
Finding
https://api.scnet.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
)
        sys.exit(error_msg)

    config.setdefault('SCNET_API_BASE', 'https://api.scnet.cn/api/llm/v1')
    return config

def recognize_with_retry(ocr_type, file_path, config, retry_count=0):
Confidence
95% confidence
Finding
https://api.scnet.cn/

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.