Tesseract Ocr

PassAudited by ClawScan on May 1, 2026.

Overview

This skill is a straightforward OCR helper that tells the agent how to use the local Tesseract command-line tool, with only minor setup and local-command considerations.

This appears safe for its intended use. Before installing, make sure you are comfortable installing Tesseract from your system package manager and only run OCR on files you intend to process.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

The user may need to install OCR software from their operating system package manager before the skill works.

Why it was flagged

The skill depends on installing external system packages, but this is a normal and disclosed setup step for using Tesseract OCR.

Skill content

sudo apt-get install tesseract-ocr tesseract-ocr-chi-sim

# macOS:
brew install tesseract tesseract-lang

Recommendation

Install Tesseract only from trusted package repositories, and review package-manager prompts before approving installation.

Note

ASI05: Unexpected Code Execution

What this means

The agent may run local OCR commands against image files the user provides or identifies.

Why it was flagged

The skill instructs the agent to run the local Tesseract CLI on user-provided image files. This command execution is central to the skill's OCR purpose and is not hidden or unrelated.

Skill content

tesseract /path/to/image.png stdout -l chi_sim+eng

Recommendation

Use the skill on intended image files only, and check output file paths when saving OCR results.