document-ocr
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses standard, well-known libraries such as docling, PyMuPDF (fitz), and Pillow for document processing and layout detection.
- [SAFE]: Network operations are directed solely to user-configured OCR backends (local vLLM/Ollama hosts or cloud API providers like Anthropic and OpenAI). No unauthorized data exfiltration or hardcoded malicious URLs were found.
- [SAFE]: Credential management follows best practices by resolving API keys and host configurations from environment variables or command-line arguments provided by the user.
- [SAFE]: No obfuscation, prompt injection, persistence mechanisms, or unauthorized privilege escalation patterns were detected in the instructions or scripts.
- [SAFE]: The 'born-digital' fast path correctly processes PDFs locally without network calls, and the classification logic for determining if a PDF needs OCR is transparent and based on file heuristics.
Audit Metadata