ClawHub
Back to skill

Security audit

TencentCloud VatInvoice OCR

Security checks across malware telemetry and agentic risk

Overview

This skill is a straightforward Tencent Cloud invoice OCR helper, but users should understand that invoice documents or URLs are sent to Tencent Cloud for processing.

Install only if you are authorized and comfortable sending the target invoices or invoice URLs to Tencent Cloud. Use a dedicated least-privilege Tencent Cloud key for OCR, avoid committing credentials, monitor API charges, and do not process invoices whose tax IDs, bank details, addresses, or line items must remain local.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The trigger condition includes a broad catch-all such as covering 'any invoice OCR scenario' and batch extraction, which can cause the skill to activate unexpectedly outside the user's clear intent. In this context, accidental invocation is more concerning because invoice images contain sensitive financial and personal data that may then be sent to Tencent Cloud for processing.

Missing User Warnings

High
Confidence
97% confidence
Finding
The skill describes OCR capabilities but does not clearly warn users that invoice images and PDFs will be transmitted to a third-party cloud provider for processing. Because invoices routinely contain tax IDs, addresses, bank details, and transaction data, lack of disclosure can lead to privacy violations, noncompliant handling of sensitive business records, and unexpected external data transfer.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The documentation instructs users to configure long-lived cloud credentials but provides no guidance on least privilege, secret storage, rotation, or avoiding exposure in logs and repos. In practice, this increases the chance of credential leakage or misuse, especially for a skill intended for repeated automation against a paid cloud API.

Missing User Warnings

Medium
Confidence
87% confidence
Finding
The script sends invoice images or PDFs, which commonly contain sensitive personal and financial data, to Tencent Cloud for OCR processing without any explicit user-facing privacy notice or confirmation at the point of submission. In a skill context, users may not realize their document contents are being transmitted to a third-party cloud service, creating a real privacy and compliance risk even though the network call is expected functionality.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.