Skip to content
← Registry
Trust Report

OpenOCR

Extract text from images, documents and scanned PDFs using OpenOCR - supports text detection, recognition, universal VLM recognition, and document parsing with layout analysis

91
CONDITIONAL
Format: openclawScanner: v0.8.0Duration: 34msScanned: 1d ago · May 10, 1:16 AMSource →
Embed this badge
AgentVerus CONDITIONAL 91AgentVerus CONDITIONAL 91AgentVerus CONDITIONAL 91
[![AgentVerus](https://agentverus.ai/api/v1/skill/40c43952-c5df-4f80-91df-494a1235dc53/badge)](https://agentverus.ai/skill/40c43952-c5df-4f80-91df-494a1235dc53)
Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

Sign in to comment on this skill

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

https://agentverus.ai/api/v1/skill/40c43952-c5df-4f80-91df-494a1235dc53/trust
Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction
curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"40c43952-c5df-4f80-91df-494a1235dc53","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'
Fetch trust JSON
curl https://agentverus.ai/api/v1/skill/40c43952-c5df-4f80-91df-494a1235dc53/trust

Category Scores

71
Permissions
100
Injection
100
Dependencies
100
Behavioral
70
Content
100
Code Safety

Findings (8)

highPermission-purpose mismatch: "code_execution" on limited-scope skill-15

The skill "OpenOCR" appears to be limited in scope but requests "code_execution" which is unusual for its stated purpose.

Skill: "OpenOCR" (Extract text from images, documents and scanned PDFs using OpenOCR - supports te...) requests "code_execution"

Review whether "code_execution" is truly needed for a openocr.

permissionsASST-03
mediumCapability contract mismatch: inferred network access is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: https://github.com/Topdu/OpenOCR

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-04
mediumCapability contract mismatch: inferred content extraction is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: screenshot

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-02
lowNo explicit safety boundaries-10

The skill does not include explicit safety boundaries defining what it should NOT do.

No safety boundary patterns found

Add a 'Safety Boundaries' section listing what the skill must NOT do (e.g., no file deletion, no network access beyond needed APIs).

contentASST-09
infoUnrecognized permission/tool: computer

The skill references a permission/tool string that AgentVerus does not recognize. This may be harmless, but it reduces the scanner's ability to reason about actual privilege.

Permission/tool: computer

Use canonical permission names for your framework/runtime, or document what this permission/tool does and why it is needed.

permissionsASST-08
infoUnrecognized permission/tool: code_execution

The skill references a permission/tool string that AgentVerus does not recognize. This may be harmless, but it reduces the scanner's ability to reason about actual privilege.

Permission/tool: code_execution

Use canonical permission names for your framework/runtime, or document what this permission/tool does and why it is needed.

permissionsASST-08
infoUnrecognized permission/tool: file_operations

The skill references a permission/tool string that AgentVerus does not recognize. This may be harmless, but it reduces the scanner's ability to reason about actual privilege.

Permission/tool: file_operations

Use canonical permission names for your framework/runtime, or document what this permission/tool does and why it is needed.

permissionsASST-08
infoMany external URLs referenced (6)

The skill references 6 external URLs. While not inherently dangerous, many external dependencies increase the attack surface.

URLs: https://github.com/Topdu/OpenOCR, https://github.com/Topdu/OpenOCR.git, https://pypi.org/project/openocr-python/, https://github.com/Topdu/OpenOCR#unirec, https://github.com/Topdu/OpenOCR#opendoc...

Minimize external dependencies to reduce supply chain risk.

dependenciesASST-04