tesseract
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous shell commands for system package installation (apt, brew), engine verification, and OCR processing of images and text-based image lists.
- [PRIVILEGE_ESCALATION]: Instructions include the use of sudo apt install for installing the Tesseract engine and language data on Debian/Ubuntu systems, which requires administrative access.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external image data, creating a potential surface for indirect prompt injection. 1. Ingestion points: Processes images (PNG, JPEG, TIFF) and text files containing image paths (pages.txt) via the tesseract CLI and pytesseract. 2. Boundary markers: None provided to delimit or ignore instructions within images. 3. Capability inventory: Shell execution of binaries (tesseract, pdftoppm), file system access, and network downloads of models via tesseract.js. 4. Sanitization: None performed on extracted text.
Audit Metadata