Skills/ClawHub/invoice-issue

invoice-issue@1.0.0

CAUTION· static only

Publisher claims: "支持文字 / 语音单张开票、ERP订单批量开票、非结构化资料开票三大场景，提供开票全流程标准化服务。 本 Skill 面向财务批量发票处理场景，自动多格式发票识别、真伪核验、查重风控，一键输出标准化发票台账，一站式解决人工逐票核对、重复报销管控难题。 发票开具与开票权限处理。当用户提出以下需求时触发：发票开具、数电票开具、数电票开票、蓝字发票开具、单张开票、批量开票、开票二维码获取、开票二维码状态查询、开票授权、开票权限校验、开票权限延长、扫码授权开票" Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher ningmengyun12366 · publishing for 135 daysInstalls 544Last detonated 2d ago
What would fix thisWatchDispute verdict

Coverage

Static only; nothing was run yet.

The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-12 and scored it 69/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

MEDIUM
File type combined with upload actionSKILL.md:193 · File type combined with upload action — agent may exfiltrate local data files正常开票流程中，Agent 写入 `issue-batch-invoice-info-check --input <file>.json` 的文件时，必须构造“开票检查原始 input JSON”，不得构造正式开票接口 payload，也不得照抄任务状态 JSON 中的 `check_result.invoice_payload_json`。Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07

No other findings across 3,701 lines in 15 files.

Cost to the agent

Instructions loaded
≈2,661 tok
1 file · 15 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

11 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim ningmengyun12366: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. File type combined with upload action≈ +2 on the totalRemove the call, or declare the host in frontmatter and explain in the README what is sent and why.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim ningmengyun12366Propose a patch to the maintainer
invoice-issue@1.0.0 safety verdict: Caution (static only) — KillerSkills