Mistral OCR
v1.0.4Extract text, tables, and images from PDFs or images using Mistral OCR API and output in Markdown, JSON, or HTML formats.
⭐ 5· 1.7k·6 current·9 all-time
byLeyuDame2@yzdame
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Mistral OCR) align with required artifacts: the SKILL.md, README, requirements.txt and script all declare and use MISTRAL_API_KEY and the mistralai client to upload files for OCR. There are no unrelated credentials or binaries requested.
Instruction Scope
SKILL.md explicitly instructs uploading files to Mistral and warns about privacy. The included script only reads the user-specified input file, uses MISTRAL_API_KEY, uploads the file to Mistral, calls the OCR model, and writes output and extracted images locally. The instructions do not request additional system files, secrets, or unexpected external endpoints.
Install Mechanism
There is no automated install spec (instruction-only), and dependencies are limited to a single Python package (requirements.txt: mistralai). This is proportionate for a Python CLI tool that talks to Mistral. Installing from PyPI (mistralai) is the expected setup; no opaque downloads or extract-from-URL steps are present.
Credentials
The skill requires a single environment variable (MISTRAL_API_KEY) which is necessary and sufficient for the declared cloud OCR functionality. The code does not read additional environment variables or other credentials.
Persistence & Privilege
The skill is not always-enabled, does not request persistent platform privileges, and does not modify other skills or system-wide agent settings. It runs as a normal user-mode CLI script.
Assessment
This skill will upload any file you give it to Mistral's servers for OCR. Only install/use it for non-sensitive documents unless you accept that remote processing will occur and you've reviewed Mistral's privacy policy. Installing requires the mistralai Python package (pip install -r requirements.txt) and setting MISTRAL_API_KEY in your environment; limit the key's scope where possible and rotate/revoke it if you stop using the skill. Minor note: the package metadata in _meta.json shows a different ownerId than the registry header—not necessarily malicious but worth verifying the repository/source if provenance matters. If you need offline processing for confidential documents, use a local OCR tool instead.Like a lobster shell, security has layers — review code before you run it.
documentvk973wch8r8z583gbe559t3q3es8163vglatestvk97fxnfvzv88zwfesmxyg8qvgx817tfxocrvk973wch8r8z583gbe559t3q3es8163vgpdfvk973wch8r8z583gbe559t3q3es8163vg
License
MIT-0
Free to use, modify, and redistribute. No attribution required.