Skills/ClawHub/sm-ocr-scanner

sm-ocr-scanner@1.2.2

VERIFIED

Publisher claims: "Lokale OCR für Rasterbilder (jpg, png, bmp, gif, tiff, webp) und PDF-Dateien mit dem systemeigenen tesseract-Binary. PDF-Seiten werden lokal mit pdftoppm gerastert, vorhandene PDF-Textlayer mit pdftotext gelesen. Ausgabe als Klartext, TSV mit Konfidenzwerten oder durchsuchbares PDF. Die OCR läuft ohne Netzwerkverbindung, ohne Cloud-Dienst und ohne API-Key. Nur der optionale, vom Nutzer gestartete Installer lädt Abhängigkeiten über den Paketmanager der Distribution (optional PyPI mit --allow-pip); Systempakete installiert er nur, wenn der Nutzer ihn selbst als root startet, und erst nach Bestätigung am Paketmanager. Das Paket enthält nur Text." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher kaarl92 · joined 5 days agoInstalls 1,214Last detonated 5d ago
$clawhub install sm-ocr-scanner
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-29 and scored it 84/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessexec /usr/bin/dirname
0.0sprocessexec /usr/bin/id
0.0sprocessexited 2: Systeminstallation bewusst als root starten: sudo bash scripts/install.sh
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
Privileged sudo commandscripts/install.sh:81 · Privileged sudo command — agent may execute with elevated privilegesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandSKILL.md:177 · Privileged sudo command — agent may execute with elevated privilegesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/install.sh:253 · Privileged sudo command — agent may execute with elevated privilegesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandSKILL.md:140 · Privileged sudo command — agent may execute with elevated privilegesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/install.sh:76 · Privileged sudo command — agent may execute with elevated privilegesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandSKILL.md:152 · Privileged sudo command — agent may execute with elevated privilegesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05