ClawHub
Back to skill

Security audit

BaiduOCR-LocalFallback

Security checks across malware telemetry and agentic risk

Overview

This OCR skill does what it claims, but users should treat Baidu image uploads and saved API credentials as sensitive.

Install only if you trust the GitHub source, the shell installer, and Baidu as a processor for the images you submit. Prefer environment variables over the plaintext config file, avoid entering secrets where others can see or record the terminal, and use local OCR for IDs, bank cards, passports, receipts, or other sensitive documents unless you understand Baidu's data handling terms.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill prominently markets 115+ OCR APIs and a local fallback, but does not clearly warn users near the feature description and quick start that images may be transmitted to Baidu's cloud service whenever fallback is not used. Because OCR inputs commonly contain sensitive personal or financial documents, the lack of an explicit privacy/data-transfer notice can mislead users into exposing regulated or confidential data to a third party.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The script prompts for a secret key using a visible `read -p`, which exposes the credential on-screen and potentially in terminal recordings or shoulder-surfing scenarios. It then writes both API credentials to a plaintext JSON file in the user's home directory without an explicit warning or consent step about persistent storage, increasing the risk of credential disclosure if the account or filesystem is accessed.

Session Persistence

Medium
Category
Rogue Agent
Content
"Detect OS (macOS / Linux / Windows)",
        "Check Python 3.8+",
        "Install Python dependencies (requests, easyocr, Pillow)",
        "Create config directory ~/.openclaw/skills/BaiduOCR-LocalFallback/",
        "Interactive API key configuration (or skip and configure later)",
        "Test Baidu OCR connection"
      ],
Confidence
91% confidence
Finding
Create config directory ~/.openclaw/skills/BaiduOCR-LocalFallback/", "Interactive API key configuration (or skip and configure later)", "Test Baidu OCR connection" ], "requ

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.