Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

TencentCloud LicensePlate OCR

v1.0.2

腾讯云车牌识别(LicensePlateOCR)接口调用技能。当用户需要对中国大陆机动车车牌进行自动定位和识别时,应使用此技能。支持返回车牌号码、车牌颜色、置信度和像素坐标信息,支持多车牌场景识别,支持图片Base64和URL两种输入方式。

0· 388·2 current·2 all-time
bytencent-ocr@zt1314p-design

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for zt1314p-design/tencentcloud-ocr-licenseplate.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "TencentCloud LicensePlate OCR" (zt1314p-design/tencentcloud-ocr-licenseplate) from ClawHub.
Skill page: https://clawhub.ai/zt1314p-design/tencentcloud-ocr-licenseplate
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Canonical install target

openclaw skills install zt1314p-design/tencentcloud-ocr-licenseplate

ClawHub CLI

Package manager switcher

npx clawhub@latest install tencentcloud-ocr-licenseplate
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
Name, description, SKILL.md, and the included script all align: this is an adapter for Tencent Cloud's LicensePlateOCR and needs Tencent Cloud credentials. However, the skill registry metadata claims no required environment variables or primary credential, which contradicts both SKILL.md and scripts/main.py that explicitly require TENCENTCLOUD_SECRET_ID and TENCENTCLOUD_SECRET_KEY.
Instruction Scope
SKILL.md and scripts/main.py limit actions to reading an image (file or URL), Base64 encoding if needed, and calling the official Tencent OCR API endpoint (ocr.tencentcloudapi.com). The instructions do not request unrelated files or send data to unexpected endpoints. They do instruct installing the tencentcloud SDK and setting the Tencent Cloud credentials.
Install Mechanism
There is no formal install spec; the instructions and script require the public PyPI package tencentcloud-sdk-python (pip install). Using a PyPI SDK is a common pattern but carries the moderate risk of third-party package supply-chain issues; no arbitrary downloads or unknown URLs are present.
!
Credentials
The skill legitimately needs Tencent Cloud API keys (TENCENTCLOUD_SECRET_ID and TENCENTCLOUD_SECRET_KEY) to call the service; that is proportionate to the stated purpose. The concern is the manifest/registry metadata omits these required env vars/primary credential, which is an important omission that could hide required secrets from the installer UI.
Persistence & Privilege
The skill does not request persistent presence (always: false) and does not attempt to modify other skills or global agent configuration. It only runs a client call when invoked.
What to consider before installing
This skill appears to do what it claims (call Tencent Cloud LicensePlateOCR) and requires your Tencent Cloud API keys to operate, but the registry metadata does not list those credentials — that's an inconsistency you should resolve before proceeding. Before installing: (1) confirm the publisher/trustworthiness of the skill (source/homepage are missing), (2) do not supply long-lived root credentials — prefer a minimal-permission API key or short-lived credentials, (3) be aware images (containing license plates) will be uploaded to Tencent Cloud and could have privacy/billing implications, (4) review and test the included scripts locally (scripts/main.py shows the exact calls), and (5) ensure you are comfortable installing the tencentcloud-sdk-python package from PyPI. If you cannot verify the author or the missing registry metadata is not corrected, treat installation as higher risk.

Like a lobster shell, security has layers — review code before you run it.

latestvk974cgn94k1xm66xapr1mc9xvd82ncf1
388downloads
0stars
3versions
Updated 19h ago
v1.0.2
MIT-0

腾讯云车牌识别 (LicensePlateOCR)

用途

调用腾讯云OCR车牌识别接口,支持对中国大陆机动车车牌的自动定位和识别,返回地域编号和车牌号码与车牌颜色信息。

核心能力:

  • 车牌号码识别:自动定位并识别车牌号码(如:京AF0236)
  • 车牌颜色识别:支持白、黑、蓝、绿、黄、黄绿、临牌、喷漆、其它
  • 车牌类别判断:区分实体车牌与非实体车牌
  • 多车牌识别:支持图片中存在多个车牌的场景,通过 LicensePlateInfos 返回全部车牌信息
  • 坐标定位:返回车牌在原图中的像素坐标框(X, Y, Width, Height)

官方文档:https://cloud.tencent.com/document/api/866/36211

默认接口请求频率限制:10次/秒。

使用时机

当用户提出以下需求时触发此技能:

  • 需要从图片中识别机动车车牌号码
  • 需要获取车牌颜色信息
  • 需要判断车牌类别(实体/非实体)
  • 图片中包含多个车牌需要全部识别
  • 涉及车牌OCR识别的任何场景

环境要求

  • Python 3.6+
  • 依赖:tencentcloud-sdk-python(通过 pip install tencentcloud-sdk-python 安装)
  • 环境变量:
    • TENCENTCLOUD_SECRET_ID:腾讯云API密钥ID
    • TENCENTCLOUD_SECRET_KEY:腾讯云API密钥Key

使用方式

运行 scripts/main.py 脚本完成车牌识别。

请求参数

参数类型必填说明
ImageBase64str否(二选一)图片Base64值,编码后不超过10M,支持PNG/JPG/JPEG,不支持GIF
ImageUrlstr否(二选一)图片URL地址,下载时间不超过3秒。都提供时仅使用ImageUrl
UserAgentstr请求来源标识(可选),用于追踪调用来源,统一固定为Skills

输出格式

识别成功后返回 JSON 格式结果:

{
  "Number": "京AF0236",
  "Confidence": 99,
  "Color": "蓝",
  "LicensePlateCategory": "实体车牌",
  "Rect": {
    "X": 426,
    "Y": 423,
    "Width": 135,
    "Height": 66
  },
  "LicensePlateInfos": [
    {
      "Number": "京AF0236",
      "Confidence": 99,
      "Color": "蓝",
      "Rect": {
        "X": 426,
        "Y": 423,
        "Width": 135,
        "Height": 66
      },
      "LicensePlateCategory": "实体车牌"
    }
  ],
  "PlateCount": 1,
  "RequestId": "5141467c-0a67-4f7c-b1c5-8147d84681a1"
}

响应字段说明:

字段类型说明
Numberstr识别出的车牌号码
Confidenceint置信度,0-100
Colorstr车牌颜色:白/黑/蓝/绿/黄/黄绿/临牌/喷漆/其它
LicensePlateCategorystr车牌类别:实体车牌/非实体车牌
Rectobject车牌在原图中的像素坐标框(X, Y, Width, Height)
LicensePlateInfoslist全部车牌信息列表(多车牌场景)
LicensePlateInfos[].Numberstr车牌号码
LicensePlateInfos[].Confidenceint置信度 0-100
LicensePlateInfos[].Colorstr车牌颜色
LicensePlateInfos[].Rectobject像素坐标框
LicensePlateInfos[].LicensePlateCategorystr车牌类别
PlateCountint检测到的车牌数量
RequestIdstr唯一请求ID

错误码说明

错误码含义
FailedOperation.DownLoadError文件下载失败
FailedOperation.ImageDecodeFailed图片解码失败
FailedOperation.OcrFailedOCR识别失败
FailedOperation.UnKnowError未知错误
FailedOperation.UnOpenError服务未开通
InvalidParameterValue.InvalidParameterValueLimit参数值错误
LimitExceeded.TooLargeFileError文件内容太大
ResourceUnavailable.InArrears账号已欠费
ResourceUnavailable.ResourcePackageRunOut账号资源包耗尽
ResourcesSoldOut.ChargeStatusException计费状态异常

业务逻辑说明

  1. ImageBase64和ImageUrl必须提供其一,都提供时只使用ImageUrl
  2. 图片支持PNG、JPG、JPEG格式,不支持GIF
  3. 图片经Base64编码后不超过10M,下载时间不超过3秒
  4. 使用通用CommonOCR控制器,无特殊业务逻辑
  5. 支持多车牌识别,通过LicensePlateInfos返回全部车牌

调用示例

# 通过URL识别车牌
python scripts/main.py --image-url "https://example.com/car.jpg"

# 通过文件路径(自动Base64编码)识别
python scripts/main.py --image-base64 ./car.jpg

# 通过Base64文本文件识别
python scripts/main.py --image-base64 ./base64.txt

# 指定地域
python scripts/main.py --image-url "https://example.com/car.jpg" --region ap-beijing```

Comments

Loading comments...