Skills/ClawHub/va-docparse

va-docparse@1.0.1

VERIFIED· install only

Publisher claims: "Trigger when user mentions OCR/文档解析/阅读/识别/读取 or asks to extract text from documents. Parses PDF/images via remote document parsing service. NOT for audio/vid..." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher va-ais · publishing for 159 daysInstalls 591Last detonated 10 h ago
$clawhub install va-docparse
WatchReport an issue

Coverage

Install scripts ran; no agent task scenario for this bundle.
Tested
install scripts, with decoy credentials in place · second launch with the clock 45 days ahead · every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; install scripts ran; no agent task scenario for this bundle) on 2026-11-13 and scored it 84/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessinstall script run in the sandbox
0.1sprocessexited 1: EOFError: EOF when reading a line
0.1sprocessscript backend runs setup only
0.1sprocessscript backend runs setup only
0.2sprocesssecond launch, clock +45 days, CI unset
0.3sprocessexited 1: EOFError: EOF when reading a line

Static findings

LOW
URL to a private-network addresssetup.py:271 · URL to a private-network address — a LAN or development target%(prog)s --mcp-url http://10.24.9.2:8097/mcp --api-key my-secret-keyFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Access to sensitive file pathssetup.py:98 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv_path = skill_dir / ".env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
LOW
URL to a private-network address.env:5 · URL to a private-network address — a LAN or development targetDOCPARSE_MCP_URL=http://10.24.73.25:5005/mcpFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Access to sensitive file pathsmcp/docparse.py:44 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# Location of this script (for resolving relative .env paths)Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
LOW
URL to a private-network addresssetup.py:309 · URL to a private-network address — a LAN or development target" 格式示例: http://10.24.9.2:8097/mcp\n"Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Python subprocess execution detectedsetup.py:223 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Access to sensitive file pathsmcp/docparse.py:16 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files3. Skill directory .env fileFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:89 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files3. **`.env`** 文件（skill 目录下）— 最低优先级Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsmcp/docparse.py:79 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"""Load .env file from the skill directory (parent of mcp/).Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssetup.py:109 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesprint(f" ℹ️ .env 已存在: {env_path}")Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssetup.py:97 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"""创建 .env 文件（如不存在）"""Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
LOW
URL to a private-network addresssetup.py:270 · URL to a private-network address — a LAN or development target%(prog)s --mcp-url http://10.24.9.2:8097/mcpFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Access to sensitive file pathsmcp/docparse.py:82 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files1. <skill_dir>/.env (i.e. the directory containing mcp/)Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsmcp/docparse.py:81 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesSearches for .env in:Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
LOW
URL to a private-network addresssetup.py:272 · URL to a private-network address — a LAN or development target%(prog)s --dry-run --mcp-url http://10.24.9.2:8097/mcpFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Access to sensitive file pathssetup.py:114 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesprint(f" ✅ .env 配置已是最新")Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssetup.py:8 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files3. 创建 .env 配置文件（如不存在）Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05

Cost to the agent

Instructions loaded
≈1,348 tok
1 file · 8 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.