iflytek-pdf-image-ocr
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Comprehensive analysis of the provided Python scripts and documentation reveals no malicious patterns, obfuscation, or unauthorized access attempts. The skill implements standard authentication procedures for iFlytek's APIs.
- [EXTERNAL_DOWNLOADS]: The skill performs authorized network communications with iFlytek's official API domains (
cbm01.cn-huabei-1.xf-yun.comandiocr.xfyun.cn) to perform OCR operations. - [DATA_EXFILTRATION]: The skill reads local image and PDF files as requested by the user and uploads them to iFlytek's servers for extraction and formatting, which is the primary intended purpose of the skill.
- [SAFE]: (Indirect Prompt Injection Surface Evaluation)
- Ingestion points: Local image and PDF files processed via
image_ocr.pyandpdf_ocr.py. - Boundary markers: None; the skill returns extracted text directly to the agent context.
- Capability inventory: The skill utilizes file reading and network POST/GET operations to interact with iFlytek APIs.
- Sanitization: The skill does not sanitize or filter the content of the extracted text before returning it.
Audit Metadata