image-ocr

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the user or agent installs missing OCR dependencies separately, security depends on choosing trusted package sources and versions.

Why it was flagged

The skill's visible instructions require external OCR/Python dependencies, but the registry provides no install specification or pinned provenance for them.

Skill content
Source: unknown; Homepage: none ... No install spec — this is an instruction-only skill.
Recommendation

Install Tesseract, pytesseract, and Pillow only from trusted sources, and pin versions for repeatable use.

What this means

Selecting a broad folder could extract text from more local images than intended, including receipts, screenshots, or forms.

Why it was flagged

The documented batch workflow can read every supported image in a chosen directory and write OCR results to a file.

Skill content
def process_image_directory(directory_path, output_file):
    """Process all images in a directory and save results."""
Recommendation

Use narrow, intentional input folders and review OCR output before sharing it elsewhere.