TencentCloud OCR

腾讯云通用文字识别（高精度版）(GeneralAccurateOCR) 技能包。当用户发送/粘贴图片、提供图片URL、或要求识别图片中的文字时，应自动调用此技能。支持图像整体文字的检测和识别，支持中文、英文、中英文、数字和特殊字符号的识别，并返回文字框位置和文字内容。适用于文字较多、版式复杂、对识别准召率要求较高...

This skill appears to implement Tencent Cloud OCR and will send images (or uploaded files) to Tencent's OCR endpoint using credentials you must provide. Before installing: - Verify the publisher/source (no homepage is provided and registry metadata omitted required env vars). If you don't trust the owner, do not provide your Tencent credentials. - Understand it will automatically trigger on messages containing images or image URLs (per SKILL.md). If you want manual control, disable autonomous invocation or avoid granting broad triggers. - The resume parsing guidance enforces verbatim output of recognized text (including PII). Only run this on content you are permitted to send to an external service; consider using redaction or local-only processing for sensitive images. - Provide least-privilege credentials (use a dedicated Tencent account or temporary credentials) and monitor billing and API usage if you enable the skill. - If you need higher assurance, inspect/execute scripts/main.py in a sandbox or request a signed, documented release from a verified source. The main concrete problem here is the metadata mismatch about required env vars — that should be corrected or explained by the publisher before trusting the skill.

Type: OpenClaw Skill Name: tencentcloud-ocr Version: 1.0.3 The skill bundle provides a legitimate integration with Tencent Cloud's General Accurate OCR API. The Python script (scripts/main.py) uses the official Tencent Cloud SDK to process images or PDFs, and the documentation (SKILL.md and references/resume-parsing.md) provides clear, task-aligned instructions for the AI agent to perform text extraction and resume parsing without any signs of malicious intent, data exfiltration, or prompt injection attacks.