Telegraph Transfer Ocr

• Outcome: Pass
• Latest audit: Jun 3, 2026 · 1:41 AM UTC
• Version: 1.0.0

Overview

This skill is a straightforward cloud OCR wrapper for bank transfer vouchers, but users should understand that selected documents are uploaded to Scnet for processing.

Install only if you are comfortable sending the selected transfer voucher files to Scnet's OCR service. Avoid using it for regulated, confidential, or customer financial documents unless you have approval and understand the provider's privacy, retention, and deletion terms. Keep SCNET_API_KEY in the local config file or environment, not in chat.

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 88% confidence
• Finding: The skill clearly requires local file access, outbound network access to a third-party OCR API, and shell execution via a Python script, but these capabilities are not explicitly declared as permissions. This creates a transparency and consent gap: a user may invoke the skill without understanding that local documents will be read and transmitted externally.

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The document instructs clients to upload images/PDFs/archives containing potentially highly sensitive financial and identity data to an external OCR provider, but it provides no privacy notice, data-handling constraints, retention details, or user-consent guidance. In the context of telegraph transfer voucher OCR, the transmitted content can include names, bank account numbers, amounts, dates, ID data, and stamps, making undisclosed third-party transmission materially risky.

External Transmission

Medium

• Category: Data Exfiltration

Content

SCNET_API_KEY=your_scnet_api_key_here

# API 基础地址（一般无需修改）
SCNET_API_BASE=https://api.scnet.cn/api/llm/v1
```
2. 添加：`SCNET_API_KEY=你的密钥`
3. 设置文件权限为 600（仅所有者可读写）

• Confidence: 93% confidence
• Finding: The skill is designed to upload user-supplied telegraphic transfer vouchers to an external Scnet API endpoint for OCR processing. Because these documents can contain highly sensitive financial and personal data, external transmission materially increases confidentiality and compliance risk, especially if users are not given explicit notice or consent prompts.

External Transmission

Medium

• Category: Data Exfiltration

Content

| 变量名 | 默认值 | 说明 |
|--------|--------|------|
| SCNET_API_KEY | 必需 | Scnet API 密钥 |
| SCNET_API_BASE | https://api.scnet.cn/api/llm/v1 | API 基础地址（一般无需修改） |

### 输出

• Confidence: 91% confidence
• Finding: The configuration section confirms use of a remote API base URL, reinforcing that OCR processing occurs off-device. In the context of bank transfer vouchers, this means names, account numbers, dates, and amounts may leave the local environment, making the external transmission security-relevant rather than incidental.

External Transmission

Medium

• Category: Data Exfiltration

Content

# Sugon-Scnet OCR API 文档摘要

## 接口地址
`POST https://api.scnet.cn/api/llm/v1/ocr/recognize`

## 请求头
- `Content-Type: multipart/form-data`

• Confidence: 91% confidence
• Finding: The API endpoint shows that uploaded documents are transmitted to an external domain, which creates a real data exfiltration boundary for sensitive financial OCR workloads. While external APIs are common and not inherently malicious, this skill's purpose—processing wire transfer vouchers—means the outbound transfer can expose regulated or confidential information if users are not warned and governance controls are absent.

Static analysis

No suspicious patterns detected.