opencr-skill

Extract text from images, documents and scanned PDFs using OpenOCR - supports text detection, recognition, universal VLM recognition, and document parsing with layout analysis

This skill appears to do what it says (OCR/document parsing). Before installing or letting an agent execute it: 1) review the OpenOCR source (the SKILL.md points to a GitHub repo) to ensure you trust the code and model download sources; 2) be aware the examples imply running Python, installing dependencies (onnx/torch, etc.), and auto-downloading large model files — run in a sandbox or virtualenv and prefer explicit, verified installs; 3) consider disabling auto_download and manually fetch/verify model files (checksums) from trusted releases; 4) avoid sending highly sensitive images/documents to unknown network endpoints — confirm whether processing is local or uses remote APIs; 5) expect significant CPU/GPU and disk usage for model downloads and inference. If you want a lower-risk install, ask the skill author for a vetted pip package name, signed releases, and explicit model download URLs with checksums.

Type: OpenClaw Skill Name: opencr-skill Version: 0.1.4 The skill bundle is benign. It provides an interface for the OpenOCR library, enabling text extraction and document parsing. The `SKILL.md` clearly outlines its purpose, usage, and installation, declaring necessary tools like `code_execution` and `file_operations` which are consistent with its OCR functionality. There is no evidence of prompt injection, data exfiltration, malicious execution, persistence mechanisms, or obfuscation. The `--share` flag for Gradio demos is a standard feature of Gradio, not indicative of malicious intent within the skill itself.