Skills/ClawHub/finance-ocr-pro

finance-ocr-pro@1.0.7

VERIFIED· install only

Publisher claims: "Use this skill when the user asks to OCR, transcribe, extract, or convert the contents of a scanned PDF, image, or office document into Markdown, HTML, DOCX,..." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher rizmoon · publishing for 179 daysInstalls 1,344Last detonated 26 min ago
$clawhub install finance-ocr-pro
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-15 and scored it 83/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
Access to sensitive file pathsscripts/ai_service_vlm.py:9 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesConfiguration (environment variables or .env beside this script):Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:37 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- `scripts/ocr_setup.py` checks dependencies and creates `.env` templates, but it never installs Python packages automatically. Users must review and run dependency installation themselves.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/ocr_main.py:32 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"""Validate local dependencies and .env before the pipeline runs.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/ocr_setup.py:4 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesChecks Python dependencies and .env configuration, creates local configFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Python subprocess execution detectedscripts/docs_to_image.py:571 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Access to sensitive file pathsscripts/ai_service_vlm.py:30 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files_dotenv = _SKILL_ROOT / ".env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/ocrctl.py:215 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"env_file": str((_SCRIPT_DIR.parent / ".env").resolve()),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/ocr_setup.py:28 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files_ENV_FILE = _SKILL_ROOT / ".env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Python subprocess execution detectedscripts/ocrctl.py:102 · Python subprocess execution detectedproc = subprocess.Popen(cmd, **_worker_popen_kwargs(log_file=log_file, env=env))Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Access to sensitive file pathsscripts/ocr_main.py:51 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv_path = _SKILL_ROOT / ".env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Python subprocess execution detectedscripts/docs_to_image.py:505 · Python subprocess execution detectedresult = subprocess.run(cmd, capture_output=True, text=True, timeout=180)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Access to sensitive file pathsscripts/ocr_setup.py:29 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files_ENV_EXAMPLE = _SKILL_ROOT / ".env.example"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/ai_service_vlm.py:32 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files_dotenv = _SCRIPT_DIR / ".env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Python subprocess execution detectedscripts/ocrctl.py:192 · Python subprocess execution detectedproc = subprocess.Popen(cmd, **_worker_popen_kwargs(log_file=log_file, env=env))Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Access to sensitive file pathsSKILL.md:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- Never commit a populated `.env` file. Use `.env.example` as a template and keep real credentials local.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/ocr_setup.py:108 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"""Create .env from .env.example if it doesn't exist."""Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05

Cost to the agent

Instructions loaded
≈1,501 tok
1 file · 22 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

finance-ocr-pro@1.0.7 safety verdict: Verified (install only) — KillerSkills