laiye-doc-processing

PassAudited by ClawScan on May 10, 2026.

Overview

This appears to be a legitimate Laiye document-processing skill, but it relies on an external CLI, an API key, paid credits, and cloud processing of selected documents.

Install only if you trust Laiye ADP and are comfortable installing its external CLI. Use a dedicated API key if possible, confirm any batch folder before processing, and remember that selected documents may be sent to the ADP cloud service and consume account credits.

Findings (6)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the skill may cause an agent to install external CLI software that can run locally on your machine.

Why it was flagged

The skill is instruction-only and tells the user/agent to install and run external, unpinned package/script code that is not part of the reviewed artifacts.

Skill content
npm install -g @laiye-adp/agentic-doc-parse-and-extract-cli ... || npm install -g ...

curl -fsSL https://raw.githubusercontent.com/laiye-ai/adp-cli/main/scripts/adp-init.sh | bash
Recommendation

Prefer the npm install path from a trusted registry, review the package/source before installing, and avoid remote shell-script installers unless you trust the publisher.

What this means

The CLI will act under your Laiye ADP account and may access account-specific apps and usage limits.

Why it was flagged

The skill requires Laiye ADP account credentials for normal operation, although the registry metadata does not declare a primary credential.

Skill content
If no valid configuration exists, prompt the user to provide an API Key.
Recommendation

Provide only a Laiye ADP API key you intend to use for this service, and clear or rotate it if you no longer need the integration.

What this means

Large or repeated document processing can spend your ADP credits.

Why it was flagged

The documented service consumes account credits when documents are processed.

Skill content
Document parsing: 0.5 credits/page
Invoice/receipt extraction: 1.5 credits/page
Order extraction: 1.5 credits/page
Custom extraction: 1 credit/page
Recommendation

Confirm the intended files and approximate cost before running large batches or retries.

What this means

Documents you select for processing may contain personal, financial, or business data and will be handled by the external ADP service.

Why it was flagged

The skill is designed to process potentially sensitive local documents through the ADP service, including batch folder input.

Skill content
including invoices, orders, receipts, long texts, and common Chinese identity & credential documents ... Batch processing of local files | adp extract local <folder path>
Recommendation

Only process files you are allowed to upload to Laiye ADP, avoid broad folders unless intended, and check the provider’s privacy and retention terms.

What this means

An agent could create new ADP extraction apps while completing a document task.

Why it was flagged

Creating custom extraction apps changes account-side configuration; this is aligned with the service purpose but should be user-approved.

Skill content
Create a custom extraction app if the document type is not in the known app list
Recommendation

Ask the agent to confirm before creating, updating, or deleting custom ADP apps.

What this means

Account-specific app IDs may persist locally or in agent context between tasks.

Why it was flagged

The CLI keeps an account-specific application list cache, and the skill also suggests reusing cached app IDs.

Skill content
adp app-id cache ... Cache is permanent and does not expire.
Recommendation

Clear caches or avoid sharing agent context if app IDs or account structure should remain private.