scanned-book-ocr

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/ocr_worker.py

The fragment is a PDF/OCR runtime launcher and contains no direct evidence of malware, data exfiltration, persistence, or command execution. It has a significant trust-boundary risk because the manifest controls Python import precedence and native library locations without validation. This is potentially dangerous when the manifest or runtime directory is untrusted, but it is consistent with an intentional packaged-runtime design when those files are authenticated and trusted. The supplied text also appears to contain a syntax error at the final SystemExit call.

Confidence: 97%Severity: 58%
Audit Metadata
Analyzed At
Sep 14, 2026, 10:08 AM
Package URL
pkg:socket/skills-sh/hanzhangzzz%2Fagent-skills-zh%2Fscanned-book-ocr%2F@68bef255d56dee4b95c8cc1b62177b19cdce07207bbf7739f7aefc7d9fdd7b77