ocr-recognition

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/ocr.sh

The script appears intended as an OCR wrapper, but preprocessing has a concrete code-injection risk because command-line values are embedded directly into Python source. Unquoted command construction and unverified downloads add security concerns. Avoid preprocessing with untrusted filenames or arguments; pass values safely and verify downloaded data and the container image.

Confidence: 98%Severity: 68%
Audit Metadata
Analyzed At
Oct 9, 2026, 09:40 AM
Package URL
pkg:socket/skills-sh/xiao0916%2Flm-skills%2Focr-recognition%2F@7f8a89363bcc27bcc47293c68701a9c436184109289289eada0202876020eb71