ocr-recognition
Warn
Audited by Socket on Oct 9, 2026
1 alert found:
AnomalyAnomalyscripts/ocr.sh
LOWAnomalyLOW
scripts/ocr.sh
The script appears intended as an OCR wrapper, but preprocessing has a concrete code-injection risk because command-line values are embedded directly into Python source. Unquoted command construction and unverified downloads add security concerns. Avoid preprocessing with untrusted filenames or arguments; pass values safely and verify downloaded data and the container image.
Confidence: 98%Severity: 68%
Audit Metadata