ocr-recognition

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s capabilities are largely consistent with OCR, and no credential harvesting or off-purpose data routing is shown. However, the Docker fallback depends on an unpinned third-party image from Docker Hub rather than an official same-org Tesseract source, making the install path meaningfully risky even though overall behavior remains coherent with the stated purpose.

Confidence: 90%Severity: 56%
Audit Metadata
Analyzed At
Mar 23, 2026, 12:50 PM
Package URL
pkg:socket/skills-sh/xiao0916%2Flm-skills%2Focr-recognition%2F@5a7383d95d1602fd374be558f60f1bddb5377ae7