Security audit

screenshot-organizer

Security checks across malware telemetry and agentic risk

Overview

This skill locally scans and organizes screenshots as advertised, with privacy-sensitive OCR indexing that users should handle carefully.

Install only if you are comfortable letting it scan the selected screenshot folders locally. Review the target directory first, keep generated OCR indexes private, avoid syncing them to shared cloud folders, and use the report/dry-run modes before running organization with --execute.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (5)

Missing User Warnings

Medium

Confidence: 91% confidence
Finding: The README encourages OCR extraction, search indexing, and entity detection over screenshots, which commonly contain sensitive data such as bank details, receipts, personal messages, emails, phone numbers, and authentication-related content. Omitting a privacy warning or guidance on secure storage/export increases the risk that users will unintentionally aggregate and expose highly sensitive information in plaintext indexes or reports.

Missing User Warnings

Medium

Confidence: 87% confidence
Finding: The README advertises a full organization workflow and proposed folder restructuring without clearly warning that files may be moved, renamed, or deleted as part of organization and deduplication operations. In a tool acting on large personal screenshot collections, unclear documentation about filesystem changes can lead to accidental data loss, broken user expectations, or destructive use on the wrong directory.

Missing User Warnings

Medium

Confidence: 83% confidence
Finding: This script is explicitly designed to OCR screenshots and extract entities such as emails, phone numbers, dates, URLs, and currency amounts—data that often includes sensitive personal or financial information. In the screenshot-organizer context, that makes privacy risk more acute because users are likely to process large, mixed collections of personal screenshots without realizing how much sensitive text will be indexed.

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: The extract command persists full OCR text and detected entities to a JSON file on disk, potentially storing banking details, travel confirmations, chat content, emails, and phone numbers in plaintext. In this skill's context, centralized indexing of screenshots increases the blast radius of local compromise, accidental sharing, backups, or syncing to cloud storage.

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The organizer processes screenshots using OCR and content categorization, which can expose sensitive information such as messages, receipts, account details, or personal documents without clearly warning the user that image contents will be analyzed. Because screenshots often contain highly sensitive personal or business data, silent content inspection creates a meaningful privacy risk even if no data is exfiltrated in this file.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.