glmocr-sdk
Extracts structured data from images and documents using the GLM-OCR SDK, enabling easy parsing and digitization.
Install this skill
or
84/100
Security score
The glmocr-sdk skill was audited on Jun 1, 2026 and we found 8 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
low line 35
Access to .env file
SourceSKILL.md
| 35 | # or add to .env file in working directory: |
low line 36
Access to .env file
SourceSKILL.md
| 36 | echo "ZHIPU_API_KEY=sk-xxx" >> .env |
low line 51
Access to .env file
SourceSKILL.md
| 51 | # Or load from a specific .env file |
low line 52
Access to .env file
SourceSKILL.md
| 52 | glmocr parse image.png --env-file /path/to/.env |
low line 54
Access to .env file
SourceSKILL.md
| 54 | # Or rely on env var / auto-discovered .env (set once, then omit) |
low line 64
Access to .env file
SourceSKILL.md
| 64 | Constructor kwargs > os.environ > .env file > config.yaml > built-in defaults |
medium line 267
Access to .env file
SourceSKILL.md
| 267 | | `--env-file` | auto | Path to `.env` file (default: auto-discover from cwd) | |
medium line 348
Access to .env file
SourceSKILL.md
| 348 | - **`ZHIPU_API_KEY` not set**: SDK defaults to MaaS mode. Without a key, `parse()` will fail with a clear error message and quick-fix instructions. Set via `export ZHIPU_API_KEY=sk-xxx`, add to a `.en |
Scanned on Jun 1, 2026
View Security Dashboard