📦
yescan-scan-universal
38Quark Scan King으로 스캔 이미지 개선
저품질 문서 사진과 스크린샷은 읽거나 재사용하기 어렵습니다. 이 스킬은 승인된 이미지 하나를 Quark Scan King으로 보내고 더 깔끔한 로컬 이미지 파일을 반환합니다.
디자인 및 크리에이티브 보기
스킬 yescan-ocr-universal
📦
yescan-ocr-universal
v1.1.4 콘텐츠 리비전 r1 높은 위험 🌐 네트워크 접근📁 파일 시스템 접근🔑 환경 변수⚙️ 외부 명령어⚡ 스크립트 포함
OCR로 이미지에서 텍스트 추출
이미지와 스캔 문서에는 재사용하기 어려운 텍스트가 포함된 경우가 많습니다. 이 스킬은 하나의 이미지를 OCR 서비스로 보내고 일치하는 문서 유형에 맞는 구조화된 텍스트를 반환합니다.
지원: Claude Codex Code(CC)
설치 전에 중지하고 확인을 요청하세요.
계획을 검토하고 파일을 변경하기 전에 사용자의 명시적 동의를 받으세요.
내 에이전트로 설치
이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.
에이전트 요청
Review the Skillstore skill "yescan-ocr-universal" from https://skillstore.io/skills/yescan-ai-yescan-ocr-universal.md and its manifest at https://skillstore.io/api/skills/yescan-ai-yescan-ocr-universal/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.
에이전트가 읽기 쉬운 리소스
AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.
테스트해 보기
"yescan-ocr-universal" 사용 중입니다. VAT 송장의 사진.
예상 결과:
- 송장 유형, 송장 번호, 발행일, 판매자, 구매자, 세액, 총액이 구조화된 필드로 반환됩니다.
- 결과를 재무 검토 워크플로에 복사할 수 있습니다.
"yescan-ocr-universal" 사용 중입니다. 표가 포함된 스크린샷.
예상 결과:
- 행, 열, 셀 텍스트가 표와 유사한 구조로 반환됩니다.
- 병합되었거나 불명확한 셀은 수동 검토가 필요할 수 있습니다.
"yescan-ocr-universal" 사용 중입니다. 번역할 외국어 메뉴 이미지.
예상 결과:
- 인식된 텍스트와 번역된 텍스트가 반환됩니다.
- 번역된 이미지가 로컬에 저장되고 해당 경로가 반환됩니다.
보안 감사
높은 위험v6 • 2026. 7. 9. 버전별 보고서 열기
The skill is an OCR client that sends user images and SCAN_WEBSERVICE_KEY to the Quark Scan King service and can write translated images to /tmp/imgs. Confirmed risks include outbound sensitive document transfer, plaintext hidden API-key storage, temporary output files, and secret handling; most command execution, Windows Credential Manager, obfuscation, and high-entropy alerts are false positives from markdown or ordinary image/Base64 handling. No prompt injection attempt was found.
38
스캔된 파일
2,951
분석된 줄 수
72
검토 항목
0
오탐 무시됨
확인된 보안 우려 사항 (4)
높음
Environment file access
# 沙箱凭证兜底文件:HOME 根目录下的 .yescan_env,与其它 .env-aware 工具隔离
The code explicitly uses a home-directory .yescan_env file as credential fallback. This is a real environment-file secret access pattern.
높음
Sensitive Document Images Sent to Third-Party OCR Service
The skill explicitly supports IDs, social security cards, travel permits, degree certificates, tickets, invoices, medical reports, and other sensitive documents. The privacy documentation states user-provided images are sent to scan-business.quark.cn for OCR, so sensitive personal or regulated data leaves the user environment.
The supported scenes include multiple PII and medical document types, and the privacy table confirms image data is transmitted to a third-party OCR service.
중간
API Key Transport Documentation Mismatch
The privacy and security documents describe SCAN_WEBSERVICE_KEY as sent in an HTTP header. The implementation instead places the key in the JSON request body as aiApiKey, which weakens auditability and may mislead users reviewing exposure paths.
The documentation says the key is sent as a header, while the request builder clearly includes aiApiKey inside the JSON payload.
중간
Arbitrary URL Forwarding Without Private Address Filtering
The URL validator accepts any http or https URL and does not block private, loopback, or metadata addresses before forwarding dataUrl to the OCR service. If the upstream service fetches supplied URLs, this can enable abuse of the provider as a URL fetcher.
The local validator only checks scheme and parseability, then the client forwards the URL as dataUrl. Impact depends on upstream fetch behavior, so confidence is high enough to retain but not maximal.
기능 검토 항목 (72)
이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.
높음
Hidden file in home directory
echo 'SCAN_WEBSERVICE_KEY=<your_api_key>' > ~/.yescan_env
The documentation instructs users to create or rely on ~/.yescan_env for the API key. A plaintext hidden home-directory credential file is a real credential-at-rest risk even when disclosed.
높음
Hidden file in home directory
chmod 600 ~/.yescan_env
The documentation instructs users to create or rely on ~/.yescan_env for the API key. A plaintext hidden home-directory credential file is a real credential-at-rest risk even when disclosed.
높음
Hidden file in home directory
> The environment variable takes priority; if not set, the key is loaded from `~/.yescan_env`.
The documentation instructs users to create or rely on ~/.yescan_env for the API key. A plaintext hidden home-directory credential file is a real credential-at-rest risk even when disclosed.
높음
Hidden file in home directory
- `SCAN_WEBSERVICE_KEY` environment variable (or `~/.yescan_env`)
The documentation instructs users to create or rely on ~/.yescan_env for the API key. A plaintext hidden home-directory credential file is a real credential-at-rest risk even when disclosed.
높음
Hidden file access
echo 'SCAN_WEBSERVICE_KEY=<your_api_key>' > ~/.yescan_env
The documentation instructs users to create or rely on ~/.yescan_env for the API key. A plaintext hidden home-directory credential file is a real credential-at-rest risk even when disclosed.
높음
Hidden file access
chmod 600 ~/.yescan_env
The documentation instructs users to create or rely on ~/.yescan_env for the API key. A plaintext hidden home-directory credential file is a real credential-at-rest risk even when disclosed.
높음
Hidden file access
> The environment variable takes priority; if not set, the key is loaded from `~/.yescan_env`.
The documentation instructs users to create or rely on ~/.yescan_env for the API key. A plaintext hidden home-directory credential file is a real credential-at-rest risk even when disclosed.
높음
Hidden file access
- `SCAN_WEBSERVICE_KEY` environment variable (or `~/.yescan_env`)
The documentation instructs users to create or rely on ~/.yescan_env for the API key. A plaintext hidden home-directory credential file is a real credential-at-rest risk even when disclosed.
높음
Generic API/secret keys
export SCAN_WEBSERVICE_KEY=<your_api_key>
The documentation requires SCAN_WEBSERVICE_KEY, which is an API credential used by the skill. Secret configuration is expected but remains a real secret-handling risk.
높음
Generic API/secret keys
echo 'SCAN_WEBSERVICE_KEY=<your_api_key>' > ~/.yescan_env
The documentation requires SCAN_WEBSERVICE_KEY, which is an API credential used by the skill. Secret configuration is expected but remains a real secret-handling risk.
높음
Hidden file in home directory
echo 'SCAN_WEBSERVICE_KEY=<你的密钥>' > ~/.yescan_env
The documentation instructs users to create or rely on ~/.yescan_env for the API key. A plaintext hidden home-directory credential file is a real credential-at-rest risk even when disclosed.
높음
Hidden file in home directory
chmod 600 ~/.yescan_env
The documentation instructs users to create or rely on ~/.yescan_env for the API key. A plaintext hidden home-directory credential file is a real credential-at-rest risk even when disclosed.
높음
Hidden file in home directory
> 优先读取环境变量,未设置时自动从 `~/.yescan_env` 文件加载。
The documentation instructs users to create or rely on ~/.yescan_env for the API key. A plaintext hidden home-directory credential file is a real credential-at-rest risk even when disclosed.
높음
Hidden file in home directory
- 配置 `SCAN_WEBSERVICE_KEY` 环境变量(或 `~/.yescan_env`)
The documentation instructs users to create or rely on ~/.yescan_env for the API key. A plaintext hidden home-directory credential file is a real credential-at-rest risk even when disclosed.
높음
Hidden file access
echo 'SCAN_WEBSERVICE_KEY=<你的密钥>' > ~/.yescan_env
The documentation instructs users to create or rely on ~/.yescan_env for the API key. A plaintext hidden home-directory credential file is a real credential-at-rest risk even when disclosed.
높음
Hidden file access
chmod 600 ~/.yescan_env
The documentation instructs users to create or rely on ~/.yescan_env for the API key. A plaintext hidden home-directory credential file is a real credential-at-rest risk even when disclosed.
높음
Hidden file access
> 优先读取环境变量,未设置时自动从 `~/.yescan_env` 文件加载。
The documentation instructs users to create or rely on ~/.yescan_env for the API key. A plaintext hidden home-directory credential file is a real credential-at-rest risk even when disclosed.
높음
Hidden file access
- 配置 `SCAN_WEBSERVICE_KEY` 环境变量(或 `~/.yescan_env`)
The documentation instructs users to create or rely on ~/.yescan_env for the API key. A plaintext hidden home-directory credential file is a real credential-at-rest risk even when disclosed.
높음
Hidden file in home directory
### 3.1 推荐方式:写入 `~/.yescan_env`(永久生效)
The privacy document instructs users to store SCAN_WEBSERVICE_KEY in ~/.yescan_env. This is a plaintext hidden home-directory credential file and is a real local secret exposure risk.
높음
Hidden file in home directory
技能每次执行会读取 `~/.yescan_env`,无需重启会话。
The privacy document instructs users to store SCAN_WEBSERVICE_KEY in ~/.yescan_env. This is a plaintext hidden home-directory credential file and is a real local secret exposure risk.
높음
Hidden file in home directory
echo 'SCAN_WEBSERVICE_KEY=<your_api_key_here>' > ~/.yescan_env
The privacy document instructs users to store SCAN_WEBSERVICE_KEY in ~/.yescan_env. This is a plaintext hidden home-directory credential file and is a real local secret exposure risk.
높음
Hidden file in home directory
chmod 600 ~/.yescan_env
The privacy document instructs users to store SCAN_WEBSERVICE_KEY in ~/.yescan_env. This is a plaintext hidden home-directory credential file and is a real local secret exposure risk.
높음
Hidden file in home directory
3. 如怀疑密钥泄露:在同一后台立即 *轮换* 或 *撤销* 旧密钥,并更新 `~/.yescan_env`
The privacy document instructs users to store SCAN_WEBSERVICE_KEY in ~/.yescan_env. This is a plaintext hidden home-directory credential file and is a real local secret exposure risk.
높음
Hidden file in home directory
- [x] `~/.yescan_env` 设为 `0600` 权限,避免同机其他用户读取
The privacy document instructs users to store SCAN_WEBSERVICE_KEY in ~/.yescan_env. This is a plaintext hidden home-directory credential file and is a real local secret exposure risk.
높음
Hidden file access
### 3.1 推荐方式:写入 `~/.yescan_env`(永久生效)
The privacy document instructs users to store SCAN_WEBSERVICE_KEY in ~/.yescan_env. This is a plaintext hidden home-directory credential file and is a real local secret exposure risk.
높음
Hidden file access
技能每次执行会读取 `~/.yescan_env`,无需重启会话。
The privacy document instructs users to store SCAN_WEBSERVICE_KEY in ~/.yescan_env. This is a plaintext hidden home-directory credential file and is a real local secret exposure risk.
높음
Hidden file access
echo 'SCAN_WEBSERVICE_KEY=<your_api_key_here>' > ~/.yescan_env
The privacy document instructs users to store SCAN_WEBSERVICE_KEY in ~/.yescan_env. This is a plaintext hidden home-directory credential file and is a real local secret exposure risk.
높음
Hidden file access
chmod 600 ~/.yescan_env
The privacy document instructs users to store SCAN_WEBSERVICE_KEY in ~/.yescan_env. This is a plaintext hidden home-directory credential file and is a real local secret exposure risk.
높음
Hidden file access
3. 如怀疑密钥泄露:在同一后台立即 *轮换* 或 *撤销* 旧密钥,并更新 `~/.yescan_env`
The privacy document instructs users to store SCAN_WEBSERVICE_KEY in ~/.yescan_env. This is a plaintext hidden home-directory credential file and is a real local secret exposure risk.
높음
Hidden file access
- [x] `~/.yescan_env` 设为 `0600` 权限,避免同机其他用户读取
The privacy document instructs users to store SCAN_WEBSERVICE_KEY in ~/.yescan_env. This is a plaintext hidden home-directory credential file and is a real local secret exposure risk.
높음
Generic API/secret keys
echo 'SCAN_WEBSERVICE_KEY=<your_api_key_here>' > ~/.yescan_env
The privacy document configures SCAN_WEBSERVICE_KEY as the service credential. Handling an API secret is expected for this skill but remains security-relevant.
높음
Generic API/secret keys
'SCAN_WEBSERVICE_KEY=<your_api_key_here>' | Out-File -FilePath $HOME\.yescan_env -Encoding utf8
The privacy document configures SCAN_WEBSERVICE_KEY as the service credential. Handling an API secret is expected for this skill but remains security-relevant.
높음
Generic API/secret keys
export SCAN_WEBSERVICE_KEY=<your_api_key_here>
The privacy document configures SCAN_WEBSERVICE_KEY as the service credential. Handling an API secret is expected for this skill but remains security-relevant.
높음
Hidden file in home directory
| A0100 | 凭证无效 | 1. 确认 `~/.yescan_env` 存在且包含 `SCAN_WEBSERVICE_KEY=<key>`<br>2. 确认 key 无前后空格或引号问题<br>
The troubleshooting guidance relies on ~/.yescan_env containing SCAN_WEBSERVICE_KEY. This confirms the skill ecosystem uses a plaintext hidden credential file.
높음
Hidden file access
| A0100 | 凭证无效 | 1. 确认 `~/.yescan_env` 存在且包含 `SCAN_WEBSERVICE_KEY=<key>`<br>2. 确认 key 无前后空格或引号问题<br>
The troubleshooting guidance relies on ~/.yescan_env containing SCAN_WEBSERVICE_KEY. This confirms the skill ecosystem uses a plaintext hidden credential file.
높음
HTTP client library
response = self._send_request(param)
This client creates a requests session and posts user image data plus aiApiKey to the configured OCR API. That outbound transfer is intended but security-relevant.
높음
HTTP client library
response = self._send_request(param)
This client creates a requests session and posts user image data plus aiApiKey to the configured OCR API. That outbound transfer is intended but security-relevant.
높음
HTTP client library
response = self._send_request(param)
This client creates a requests session and posts user image data plus aiApiKey to the configured OCR API. That outbound transfer is intended but security-relevant.
높음
HTTP client library
def _send_request(self, param: Dict[str, Any]) -> requests.Response:
This client creates a requests session and posts user image data plus aiApiKey to the configured OCR API. That outbound transfer is intended but security-relevant.
높음
Python HTTP libraries
self.session = requests.Session()
This client creates a requests session and posts user image data plus aiApiKey to the configured OCR API. That outbound transfer is intended but security-relevant.
높음
Python HTTP libraries
def _send_request(self, param: Dict[str, Any]) -> requests.Response:
This client creates a requests session and posts user image data plus aiApiKey to the configured OCR API. That outbound transfer is intended but security-relevant.
높음
Hidden file in home directory
2. 用户 HOME 目录下的 ~/.yescan_env 文件(沙箱环境用,KEY=VALUE 文本格式)
The credential loader reads ~/.yescan_env from the user home directory. Reading a hidden plaintext key file is a real local secret-handling risk.
높음
Hidden file in home directory
"""从 ~/.yescan_env 读取 KEY=VALUE,缺失或异常返回空串"""
The credential loader reads ~/.yescan_env from the user home directory. Reading a hidden plaintext key file is a real local secret-handling risk.
높음
Hidden file access
2. 用户 HOME 目录下的 ~/.yescan_env 文件(沙箱环境用,KEY=VALUE 文本格式)
The credential loader reads ~/.yescan_env from the user home directory. Reading a hidden plaintext key file is a real local secret-handling risk.
높음
Hidden file access
"""从 ~/.yescan_env 读取 KEY=VALUE,缺失或异常返回空串"""
The credential loader reads ~/.yescan_env from the user home directory. Reading a hidden plaintext key file is a real local secret-handling risk.
높음
Python getenv function
api_key = os.getenv("SCAN_WEBSERVICE_KEY", "").strip()
The code loads SCAN_WEBSERVICE_KEY and stores it as the API credential used for OCR requests. Access to this secret is required but security-relevant.
높음
getenv function call
api_key = os.getenv("SCAN_WEBSERVICE_KEY", "").strip()
The code loads SCAN_WEBSERVICE_KEY and stores it as the API credential used for OCR requests. Access to this secret is required but security-relevant.
높음
Generic API/secret keys
api_key = os.getenv("SCAN_WEBSERVICE_KEY", "").strip()
The code loads SCAN_WEBSERVICE_KEY and stores it as the API credential used for OCR requests. Access to this secret is required but security-relevant.
높음
Generic API/secret keys
if api_key:
The code loads SCAN_WEBSERVICE_KEY and stores it as the API credential used for OCR requests. Access to this secret is required but security-relevant.
높음
Generic API/secret keys
return api_key
The code loads SCAN_WEBSERVICE_KEY and stores it as the API credential used for OCR requests. Access to this secret is required but security-relevant.
높음
Generic API/secret keys
api_key = CredentialManager._read_from_file("SCAN_WEBSERVICE_KEY")
The code loads SCAN_WEBSERVICE_KEY and stores it as the API credential used for OCR requests. Access to this secret is required but security-relevant.
높음
Generic API/secret keys
if api_key:
The code loads SCAN_WEBSERVICE_KEY and stores it as the API credential used for OCR requests. Access to this secret is required but security-relevant.
높음
Generic API/secret keys
return api_key
The code loads SCAN_WEBSERVICE_KEY and stores it as the API credential used for OCR requests. Access to this secret is required but security-relevant.
높음
Generic API/secret keys
def __init__(self, api_key: str, scene: str, data_type: str, platform: str = None):
The code loads SCAN_WEBSERVICE_KEY and stores it as the API credential used for OCR requests. Access to this secret is required but security-relevant.
높음
Generic API/secret keys
self.api_key = api_key
The code loads SCAN_WEBSERVICE_KEY and stores it as the API credential used for OCR requests. Access to this secret is required but security-relevant.
높음
Generic API/secret keys
"aiApiKey": self.api_key,
The code loads SCAN_WEBSERVICE_KEY and stores it as the API credential used for OCR requests. Access to this secret is required but security-relevant.
높음
Generic API/secret keys
api_key = CredentialManager.load()
The runner loads SCAN_WEBSERVICE_KEY through CredentialManager before creating the OCR client. This is direct use of a service API secret.
높음
Generic API/secret keys
api_key=api_key,
The runner loads SCAN_WEBSERVICE_KEY through CredentialManager before creating the OCR client. This is direct use of a service API secret.
높음
Hardcoded URL
API_URL = "https://scan-business.quark.cn/vision"
API_URL is the hard-coded destination for all OCR requests. It confirms that user image data is sent to an external third-party service.
높음
Hidden file in home directory
| API key stored in plaintext at `~/.yescan_env` | **disclosed**, standard practice | Recommend `chm
The security policy confirms the API key may be stored in plaintext at ~/.yescan_env. That is a real credential-at-rest risk even with chmod guidance.
높음
Hidden file access
| API key stored in plaintext at `~/.yescan_env` | **disclosed**, standard practice | Recommend `chm
The security policy confirms the API key may be stored in plaintext at ~/.yescan_env. That is a real credential-at-rest risk even with chmod guidance.
높음
Hidden file in home directory
**配置 API 密钥**:将 `SCAN_WEBSERVICE_KEY=<your_api_key>` 写入 `~/.yescan_env`(每次执行自动读取,无需重启)。获取入口:访问 `http
The skill instructions tell users to write SCAN_WEBSERVICE_KEY to ~/.yescan_env. This is a plaintext hidden home-directory credential file.
높음
Hidden file access
**配置 API 密钥**:将 `SCAN_WEBSERVICE_KEY=<your_api_key>` 写入 `~/.yescan_env`(每次执行自动读取,无需重启)。获取入口:访问 `http
The skill instructions tell users to write SCAN_WEBSERVICE_KEY to ~/.yescan_env. This is a plaintext hidden home-directory credential file.
높음
Generic API/secret keys
**配置 API 密钥**:将 `SCAN_WEBSERVICE_KEY=<your_api_key>` 写入 `~/.yescan_env`(每次执行自动读取,无需重启)。获取入口:访问 `http
The skill instructions require SCAN_WEBSERVICE_KEY as the API credential. Secret configuration is necessary but remains a real security concern.
중간
Temp directory access
"translated_image_path": "/tmp/imgs/1728912345_a1b2c3d4e5f67890.png",
The example documents translated image output under /tmp/imgs, matching the implementation behavior. This can leave sensitive translated images in temporary storage until deleted.
중간
Temp directory access
> 翻译完成,译图已保存:`/tmp/imgs/1728912345_a1b2c3d4e5f67890.png`,可直接打开查看。
The example documents translated image output under /tmp/imgs, matching the implementation behavior. This can leave sensitive translated images in temporary storage until deleted.
중간
Temp directory access
- **pic-translate 场景例外**:图片翻译场景会将译图保存到系统临时目录(`/tmp/imgs`),文件不会自动清理。
The privacy document discloses that pic-translate writes translated images to /tmp/imgs and does not automatically clean them up. Temporary storage can retain sensitive image content.
중간
Temp file creation
import tempfile
The implementation uses tempfile.gettempdir as the default save root for generated output. This creates local artifacts in temporary storage that may contain sensitive translated images.
중간
Temp file creation
DEFAULT_SAVE_DIR = tempfile.gettempdir()
The implementation uses tempfile.gettempdir as the default save root for generated output. This creates local artifacts in temporary storage that may contain sensitive translated images.
중간
Python file write/append
with open(filepath, 'wb') as f:
The code writes Base64-decoded service output to disk. The path is generated by the saver, but the saved content can still contain sensitive user data and requires cleanup controls.
중간
Temp directory access
| Translated image (`pic-translate` only) | **local write** | `/tmp/imgs/` | depends on content |
The security policy discloses translated images are written to /tmp/imgs. Local temporary image artifacts can retain sensitive content and need cleanup controls.
중간
Temp directory access
- Write output files to disk — except `pic-translate` scene, which saves the translated image to `/t
The security policy discloses translated images are written to /tmp/imgs. Local temporary image artifacts can retain sensitive content and need cleanup controls.
위험 요인
🌐 네트워크 접근 (34)
examples/business-license-ocr-example.md:45 examples/commercial-invoice-ocr-example.md:47 examples/degree-certificate-ocr-example.md:46 examples/driver-license-ocr-example.md:45 examples/formula-ocr-example.md:40 examples/general-ocr-example.md:40 examples/handwritten-ocr-example.md:40 examples/idcard-ocr-example.md:45 examples/medical-report-ocr-example.md:45 examples/pharmaceutical-inspection-report-example.md:47 examples/pic-translate-example.md:41 examples/product-image-ocr-example.md:40 examples/question-ocr-example.md:40 examples/social-security-card-ocr-example.md:44 examples/table-ocr-example.md:49 examples/train-ticket-ocr-example.md:47 examples/travel-permit-ocr-example.md:44 examples/vat-invoice-ocr-example.md:47 examples/vehicle-license-ocr-example.md:45 references/implementation.md:14 scripts/common/messages.py:3 scripts/common/messages.py:4 scripts/common/ocr_client.py:125 scripts/common/ocr_client.py:155 scripts/common/ocr_client.py:174 scripts/common/ocr_client.py:196 scripts/common/ocr_client.py:86 scripts/common/ocr_client.py:196 scripts/common/ocr_client.py:212 scripts/common/runner.py:46 scripts/common/settings.py:18 SKILL.md:9 SKILL.md:17 SKILL.md:190
📁 파일 시스템 접근 (49)
examples/pic-translate-example.md:24 examples/pic-translate-example.md:32 README.md:43 README.md:44 README.md:46 README.md:91 README.md:43 README.md:44 README.md:46 README.md:91 README.zh-CN.md:43 README.zh-CN.md:44 README.zh-CN.md:46 README.zh-CN.md:91 README.zh-CN.md:43 README.zh-CN.md:44 README.zh-CN.md:46 README.zh-CN.md:91 references/privacy.md:26 references/privacy.md:28 references/privacy.md:33 references/privacy.md:34 references/privacy.md:55 references/privacy.md:59 references/privacy.md:26 references/privacy.md:28 references/privacy.md:33 references/privacy.md:34 references/privacy.md:55 references/privacy.md:59 references/privacy.md:22 references/troubleshooting.md:11 references/troubleshooting.md:11 scripts/common/__init__.py:7 scripts/common/file_saver.py:9 scripts/common/file_saver.py:54 scripts/common/file_saver.py:210 scripts/common/ocr_client.py:42 scripts/common/ocr_client.py:60 scripts/common/ocr_client.py:42 scripts/common/ocr_client.py:60 scripts/common/settings.py:11 scripts/common/settings.py:12 SECURITY.md:22 SECURITY.md:22 SECURITY.md:12 SECURITY.md:44 SKILL.md:17 SKILL.md:17
🔑 환경 변수 (21)
README.md:39 README.md:43 references/privacy.md:33 references/privacy.md:40 references/privacy.md:46 scripts/common/ocr_client.py:50 scripts/common/ocr_client.py:50 scripts/common/ocr_client.py:50 scripts/common/ocr_client.py:51 scripts/common/ocr_client.py:52 scripts/common/ocr_client.py:53 scripts/common/ocr_client.py:54 scripts/common/ocr_client.py:55 scripts/common/ocr_client.py:80 scripts/common/ocr_client.py:82 scripts/common/ocr_client.py:181 scripts/common/result_handlers.py:48 scripts/common/result_handlers.py:84 scripts/common/runner.py:75 scripts/common/runner.py:77 SKILL.md:17
⚙️ 외부 명령어 (43)
references/privacy.md:37 references/privacy.md:39 scripts/common/settings.py:7 scripts/common/settings.py:11 scripts/common/settings.py:12 scripts/common/settings.py:13 SKILL.md:15 SKILL.md:17 SKILL.md:35 SKILL.md:36 SKILL.md:37 SKILL.md:41-43 SKILL.md:43-52 SKILL.md:52-61 SKILL.md:61-63 SKILL.md:63 SKILL.md:64 SKILL.md:65-73 SKILL.md:73 SKILL.md:79-84 SKILL.md:84-89 SKILL.md:89-94 SKILL.md:94-99 SKILL.md:99-104 SKILL.md:104-109 SKILL.md:109-114 SKILL.md:114-119 SKILL.md:119-124 SKILL.md:124-129 SKILL.md:129-134 SKILL.md:134-139 SKILL.md:139-144 SKILL.md:144-149 SKILL.md:149-154 SKILL.md:154-159 SKILL.md:159-164 SKILL.md:164-169 SKILL.md:169-185 SKILL.md:185-198 SKILL.md:198-199 SKILL.md:199-200 SKILL.md:200-201 SKILL.md:201-202
⚡ 스크립트 포함 (1)
감사자: codex 감사 이력 보기 →
이 보고서 공유 및 인용
버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.
보고서 링크 복사
https://skillstore.io/skills/yescan-ai-yescan-ocr-universal/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 배지
[](https://skillstore.io/skills/yescan-ai-yescan-ocr-universal?utm_source=security_passport_badge)HTML 배지
<a href="https://skillstore.io/skills/yescan-ai-yescan-ocr-universal?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/yescan-ai-yescan-ocr-universal/security.svg" alt="Skillstore security assessment" loading="lazy"></a>임베드 카드
<iframe src="https://skillstore.io/embed/skills/yescan-ai-yescan-ocr-universal.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>학술 인용 (APA · BibTeX · CFF)
APA 인용
yescan-ai. (2026). yescan-ocr-universal security audit report (audit version 6) [Author version 1.1.4]. Skillstore. https://skillstore.io/skills/yescan-ai-yescan-ocr-universal/audits/6BibTeX 인용
@techreport{yescan-ai-yescan-ai-yescan-ocr-universal-2026,
author = {yescan-ai},
title = {yescan-ocr-universal security audit report (audit version 6)},
institution = {Skillstore},
year = {2026},
number = {6},
url = {https://skillstore.io/skills/yescan-ai-yescan-ocr-universal/audits/6},
note = {Author version 1.1.4}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "yescan-ocr-universal security audit report (audit version 6)"
version: "1.1.4"
type: report
authors:
- name: "yescan-ai"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/yescan-ai-yescan-ocr-universal/audits/6"
identifiers:
- type: other
value: "skillstore:yescan-ai-yescan-ocr-universal:audit:6"
description: "Skillstore immutable audit report identifier"
Skillstore 점수
이 점수의 이유 증거 신뢰도: 중간 82
아키텍처
100
유지보수성
87
콘텐츠
71
커뮤니티
100
사양 준수
만들 수 있는 것
비즈니스 문서 디지털화
송장, 사업자등록증, 티켓, 양식에서 핵심 필드를 추출하여 기록 입력 속도를 높입니다.
재무 증빙 처리
환급 또는 감사 검토 전에 VAT 송장, 기차표, 상업 송장을 읽습니다.
학습 자료 변환
교실 또는 연구 이미지에서 수식, 문제, 표, 필기 노트를 인식합니다.
이 프롬프트를 사용해 보세요
기본 텍스트 추출
이 이미지에서 텍스트를 추출하세요: /path/to/image.png
송장 읽기
이 송장 이미지를 읽고 판매자, 구매자, 날짜, 품목, 세액, 총액을 반환하세요: /path/to/invoice.jpg
표 인식
이 스크린샷에서 표를 추출하고 행과 열 구조를 유지하세요: /path/to/table.png
분류 및 추출
이 문서에 가장 적합한 OCR 장면을 식별하고, 핵심 필드를 추출하며, 중요한 라벨을 보존하세요: /path/to/document.webp
모범 사례
- 민감한 이미지를 전송하기 전에 사용자가 타사 OCR 처리에 동의했는지 확인하세요.
- 가능한 경우 API 키에는 환경 변수나 보호된 비밀 저장소를 사용하세요.
- 더 이상 필요하지 않은 임시 번역 이미지 파일은 삭제하세요.
피하기
- 명확한 규정 준수 근거 없이 정부 발급 신분증, 의료 보고서 또는 재무 기록을 처리하지 마세요.
- 디렉터리 경로를 전달하거나 한 번의 실행에서 많은 파일을 스캔하도록 스킬에 요청하지 마세요.
- API 키를 프롬프트, 명령 인수, 스크린샷 또는 공유 로그에 붙여넣지 마세요.
자주 묻는 질문
이 스킬은 API 키 없이 작동하나요?
아니요. Quark Scan King 서비스를 사용하려면 SCAN_WEBSERVICE_KEY가 필요합니다.
로컬 이미지 파일을 처리할 수 있나요?
예. 사용자가 지정한 하나의 로컬 이미지 경로를 읽고 이미지 콘텐츠를 OCR용으로 전송할 수 있습니다.
이미지 데이터는 어디로 전송되나요?
이 스킬은 OCR 처리를 위해 이미지 입력을 scan-business.quark.cn으로 전송합니다.
스캔된 표를 지원하나요?
예. 이미지에 행과 열 구조를 유지해야 하는 표가 포함된 경우 table OCR 장면을 사용하세요.
이미지 안의 텍스트를 번역할 수 있나요?
예. pic-translate 장면은 번역된 텍스트를 반환하고 번역된 이미지를 로컬에 저장합니다.
여러 이미지를 한 번에 처리하나요?
아니요. 문서화된 워크플로는 호출당 하나의 이미지를 처리합니다.
개발자 세부 정보
작성자
yescan-ai라이선스
MIT
작성자 버전
v1.1.4
Skillstore 리비전
r1
참조
26421118b848d9f1efc0aa169d8a7a9e7e0a877e
유지보수 최신성
2026. 7. 20.
사용량
29 다운로드 · 0 조회
파일 구조
📄 business-license-ocr-example.md
📄 commercial-invoice-ocr-example.md
📄 degree-certificate-ocr-example.md
📄 driver-license-ocr-example.md
📄 medical-report-ocr-example.md
📄 pharmaceutical-inspection-report-example.md
📄 product-image-ocr-example.md
📄 social-security-card-ocr-example.md
📄 travel-permit-ocr-example.md
📄 vehicle-license-ocr-example.md
📁 scripts/
📁 common/
📄 scan.py
📄 LICENSE
📄 SKILL.md
yescan-ai의 다른 스킬
전체 보기📦
yescan-transoffice-universal
38스캔 이미지를 Office 파일로 변환
스캔한 이미지는 사용자가 편집하기 전에 수동으로 다시 입력해야 하는 경우가 많습니다. 이 스킬은 Quark Scan King을 통해 이미지 하나를 Word, Excel 또는 PDF로 변환합니다.
오피스 및 보고서 보기
📦
yescan-universal
38Quark Scan OCR로 이미지 처리
이미지가 많은 워크플로에서는 여러 형식에 걸쳐 OCR, 정리, 번역, 문서 변환이 필요한 경우가 많습니다. 이 skill은 명시적인 설정 및 검증 단계와 함께 사용자가 제공한 이미지를 yescan CLI와 Quark Scan 서비스를 통해 처리합니다.
생산성 보기
관련 스킬
전체 보기📦
pdf-processing
79신뢰할 수 있는 추출로 PDF 처리하기
작성자 0xkynz
PDF 워크플로는 일관성이 없는 문서 전반에서 텍스트, 표, 양식 및 페이지 작업이 필요한 경우가 많습니다. 이 스킬은 Claude, Codex 및 Claude Code가 실용적인 PDF 처리 작업을 수행하도록 안내합니다.
데이터 및 분석 보기
📦
glm4v-analyze-image
79GLM-4V로 이미지 분석하기
작성자 CK991357
이미지 검토에는 짧은 캡션뿐만 아니라 구조화된 시각적 추론이 필요한 경우가 많습니다. 이 스킬은 설명, 시각적 질문, OCR, 세부 정보 추출을 위한 GLM-4V 프롬프트를 안내합니다.
데이터 및 분석 보기
📦
azure-ai-vision-imageanalysis-py
79Azure AI Vision Python으로 이미지 분석하기
작성자 sickn33
이미지 분석 워크플로에는 SDK 예제를 다시 만들지 않고도 캡션, OCR, 감지, 크롭이 필요합니다. 이 스킬은 Claude, Codex, Claude Code가 Python용 Azure AI Vision Image Analysis를 활용하도록 안내합니다.
데이터 및 분석 보기
📦
pdf-page-extract
78PDF 페이지 아티팩트 추출
작성자 AbeJitsu
PDF 변환은 텍스트, 레이아웃, 이미지를 별도로 추출할 때 자주 실패합니다. 이 skill은 텍스트 메타데이터, 렌더링된 이미지, 페이지 매핑을 결합한 추적 가능한 페이지 아티팩트를 생성합니다.
데이터 및 분석 보기
📦
pdf-analyze
80PDF 문서 분석 및 작성
작성자 21pounder
PDF 워크플로에는 여러 문서에 걸친 추출, 변환, 병합 및 양식 작성이 필요한 경우가 많습니다. 이 스킬은 반복 가능한 PDF 처리를 위한 실용적인 Python 및 명령줄 레시피를 제공합니다.
오피스 및 보고서 보기
📦
pdf-processing-pro
79양식, 표 및 OCR이 포함된 PDF 처리
작성자 davila7
PDF 워크플로에는 신뢰할 수 있는 추출, 검증 및 일괄 처리가 필요한 경우가 많습니다. 이 스킬은 Claude, Codex 및 Claude Code에 양식, 표, OCR 및 검사 작업을 위한 실용적인 PDF 워크플로를 제공합니다.
오피스 및 보고서 보기