xiaomi-ocr-setup

This code converts tagged table text into HTML and does not show evidence of malware or unauthorized system activity. Its main security issue is that untrusted cell text is inserted into HTML without escaping, creating a cross-site scripting risk if the output is rendered in a browser. Severity depends on whether input is attacker-controlled and where the output is displayed.

SUSPICIOUS. The skill's purpose and local data flow are largely coherent for an OCR MCP, and it does not appear to hide actions or exfiltrate documents. The main concerns are supply-chain related: dependency/model downloads, vLLM `--trust-remote-code`, and especially the optional third-party Ollama community model that would process user documents. That makes the skill medium-to-high risk from install/provenance trust, but not confirmed malware.