Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Vision Recognition + OCR

Vehicle/animal/plant recognition plus OCR for screenshots, photos, invoices, and tables. Use when users ask 识别车型/看图识别/提取文字/OCR. Supports local path, URL, and...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 24 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description match the included Python scripts which call Baidu image-classify and OCR endpoints; the functionality requested (vehicle/animal/plant recognition and OCR) is consistent with the code. However, the registry metadata claims 'Required env vars: none' while the SKILL.md and code clearly expect BAIDU_* credentials — an inconsistency.
Instruction Scope
SKILL.md instructs the agent to run local Python scripts with JSON args and the scripts only read an image (path/base64/URL) and BAIDU_* env vars, then POST to Baidu APIs. There is no evidence the instructions ask the agent to read unrelated files or exfiltrate data to third parties other than Baidu endpoints.
Install Mechanism
There is no install spec (instruction-only deployment). Code files exist but no install/downloads are performed by the skill. Note: the scripts use the 'requests' library but the skill declares no dependencies, so a runtime error may occur if requests is not present — this is an operational issue, not necessarily a security problem.
!
Credentials
The code legitimately requires Baidu credentials (BAIDU_BCE_BEARER_TOKEN/BAIDU_API_KEY, BAIDU_VISION_API_KEY/BAIDU_VISION_SECRET_KEY, etc.), which are proportional to the task. However, registry metadata incorrectly states no required env vars; that mismatch (plus the skill having no listed homepage or known source) raises a red flag about manifest accuracy and provenance.
Persistence & Privilege
The skill does not request 'always: true' and does not modify other skills or system settings. It runs on demand and only uses environment variables for API auth.
What to consider before installing
This skill appears to be a straightforward Baidu OCR and image-classification wrapper: it will read local image files (or accept URLs/base64) and send image data to Baidu's aip.baidubce.com endpoints, so only use it if you are comfortable uploading images (avoid sensitive personal data). Before installing: (1) be aware you must set Baidu credentials (BAIDU_BCE_BEARER_TOKEN or BAIDU_VISION_API_KEY+BAIDU_VISION_SECRET_KEY); the registry incorrectly lists no env vars — verify and supply the correct keys. (2) The skill's source/homepage is unknown — prefer code from a trusted maintainer. (3) Consider creating a dedicated/limited Baidu API key, monitor its usage, and avoid giving broader credentials than necessary. (4) You may need to install the 'requests' Python package to run the scripts. If you want higher assurance, ask the publisher for provenance or a verified homepage before use.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk97aagp3e1c73e6k2vdhe8d1kh830f14

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Vision Recognition + OCR

Recognize vehicles, animals, and plants, or extract text from screenshots, photos, invoices, and tables via Baidu vision APIs. This skill combines lightweight classification and OCR workflows in one place.

Why install this

Use this skill when you want to:

  • identify a car, animal, or plant from an image
  • extract text from screenshots, invoices, handwriting, or tables
  • send either a local path, public URL, or base64 image into the same tool family

Common use cases

  • 识别车型 / 看图识别动物或植物
  • 提取截图、票据、表格中的文字
  • 对同一张图在“识别类别”和“OCR 提取”之间切换

Quick Start

Run from the installed skill directory:

python3 scripts/ocr_general_basic.py '{"url":"https://baidu-ai.bj.bcebos.com/ocr/general.png"}'
python3 scripts/car_recognize.py '{"image_path":"/path/to/car.jpg"}'

Not the best fit

Use a different skill when you need:

  • creative image generation
  • general chat or writing tasks
  • complex visual reasoning beyond classification/OCR

Common Input JSON

  • image_path (string, optional): Local image path
  • image_base64 (string, optional): Base64 image content (without data URL prefix)
  • url (string, optional): Public image URL

At least one of image_path / image_base64 / url is required.

Classification parameters

  • top_num (int, optional): candidate count (1-20)
  • baike_num (int, optional): include baike (0/1)
  • output_brand (bool, optional, car only)

OCR parameters

Standard (general_basic)

  • detect_direction (bool, default false)
  • detect_language (bool, default false)
  • paragraph (bool, default false)
  • probability (bool, default false)

High-accuracy (accurate_basic)

  • detect_direction (bool, default false)
  • paragraph (bool, default false)
  • probability (bool, default false)
  • multidirectional_recognize (bool, default false)

Handwriting (handwriting)

  • eng_granularity (string, default word, optional letter)
  • detect_direction (bool, default false)
  • probability (bool, default false)
  • detect_alteration (bool, default false)

Table (table)

  • cell_contents (bool, default false)
  • return_excel (bool, default false)

Environment variables

Auth priority:

  1. BAIDU_BCE_BEARER_TOKEN / BAIDU_BCE_BEARER (or BAIDU_API_KEY when its value starts with bce-v3/)
  2. OAuth fallback: BAIDU_VISION_API_KEY + BAIDU_VISION_SECRET_KEY
  3. OAuth fallback: BAIDU_API_KEY + BAIDU_SECRET_KEY

API Key 获取方式(百度)

可按以下顺序准备凭据:

  1. Bearer Token(优先)
  • 在百度智能云开通图像识别/OCR能力。
  • 在控制台获取 bce-v3/... 的 Bearer Token。
  • 配置 BAIDU_BCE_BEARER_TOKEN(或写入 BAIDU_API_KEY)。
  1. API Key + Secret Key(OAuth)
  • 在百度智能云创建应用,拿到 API KeySecret Key
  • 配置 BAIDU_VISION_API_KEY + BAIDU_VISION_SECRET_KEY(或 BAIDU_API_KEY + BAIDU_SECRET_KEY)。

快速自检:

python3 scripts/ocr_general_basic.py '{"url":"https://baidu-ai.bj.bcebos.com/ocr/general.png"}'

若能返回识别结果或标准错误码(非鉴权错误),即配置成功。

OCR examples

python3 scripts/ocr_general_basic.py '{
  "url": "https://baidu-ai.bj.bcebos.com/ocr/general.png",
  "detect_direction": false,
  "detect_language": false,
  "paragraph": false,
  "probability": false
}'

python3 scripts/ocr_accurate_basic.py '{
  "url": "https://baidu-ai.bj.bcebos.com/ocr/general.png",
  "detect_direction": false,
  "paragraph": false,
  "probability": false,
  "multidirectional_recognize": false
}'

python3 scripts/ocr_handwriting.py '{
  "url": "https://baidu-ai.bj.bcebos.com/ocr/handwriting.jpeg",
  "eng_granularity": "letter",
  "detect_direction": false,
  "probability": false,
  "detect_alteration": false
}'

python3 scripts/ocr_table.py '{
  "url": "https://b0.bdstatic.com/ugc/CVzjffcaizcBDqTK_zwMEQbbd344224206285ae3b5015e2e17f62c.jpg",
  "cell_contents": false,
  "return_excel": false
}'

Related sites / 相关站点

For automotive data, VIN, EPC and growth workflows, you can reference:

在汽车数据、VIN、EPC 与增长运营相关场景,可优先参考:

Files

10 total
Select a file
Select a file to preview.

Comments

Loading comments…