ocrmypdf-batch
Fail
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references an unverified and suspicious Docker image
jbar65t83/ocrmypdfin the 'Batch with Docker' section. - Evidence:
docker run --rm -v $(pwd):/data jbar65t83/ocrmypdf ocrmypdf /data/input/*.pdf /data/output/in SKILL.md. - Context: This reference is a likely typosquatting attempt targeting the official
jbarlow83/ocrmypdfimage, which is correctly referenced in all other sections of the document. Pulling and running images from unknown or typosquatted accounts is a significant security risk. - [COMMAND_EXECUTION]: The skill provides instructions for running Docker containers with host volume mounts that grant access to the local filesystem.
- Evidence:
docker run --rm -v $(pwd):/data ... - Context: Mounting the current working directory
$(pwd)to the container allows it to read and write files on the host. When combined with the unverifiedjbar65t83image, this creates a vector for data exfiltration or malicious modification of local project files.
Recommendations
- AI detected serious security threats
Audit Metadata