Invoice Verification - 发票查验

• Outcome: Pass
• Latest audit: Sep 11, 2026 · 4:37 AM UTC
• Version: 1.0.4

Overview

The skill is a straightforward invoice-checking helper that sends user-provided invoice details to JisuAPI as its advertised function.

Install only if you are comfortable sending invoice details and your JisuAPI app key to JisuAPI for verification. Avoid using it for invoices whose tax, business, or personal data you are not authorized to share with that third-party service.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (8)

Tp2

High

• Category: MCP Tool Poisoning
• Confidence: 85% confidence

Finding

Mixing characters from multiple Unicode scripts in a single identifier is a common technique to create visually ambiguous tool names.

Content

No source excerpt is available for this finding.

Missing User Warnings

High

• Category: Not specified by scanner
• Confidence: 97% confidence

Finding

The documentation describes sending invoice identifiers, dates, amounts, check codes, and possibly taxpayer numbers to JisuAPI but does not clearly warn users that this information leaves the local environment and is shared with a third party. Because invoice data can contain sensitive commercial and personal information, lack of disclosure undermines informed consent and may violate privacy expectations or compliance requirements.

Content

No source excerpt is available for this finding.

Undeclared Tool Scope

Medium

• Category: MCP Least Privilege
• Confidence: 92% confidence

Finding

The skill advertises and operationalizes access to an environment variable API key and a remote third-party invoice verification service, but it does not declare an explicit tool scope or permissions boundary. That creates a governance gap where an agent may invoke networked behavior and handle secrets without clear least-privilege constraints or user-visible authorization expectations.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

The trigger language is broad enough that ordinary discussion about invoices or reimbursement could activate the skill and cause sensitive invoice fields to be processed. In this skill, that matters because activation can lead to transmission of financial/tax data to an external API, increasing privacy and data handling risk.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 60% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · invoiceverify.py (reported line 14)May include surrounding context.

python

import requests


INVOICE_VERIFY_URL = "https://api.jisuapi.com/invoiceverify/verify"
INVOICE_TYPE_URL = "https://api.jisuapi.com/invoiceverify/type"

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 60% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · invoiceverify.py (reported line 15)May include surrounding context.

python

import requests


INVOICE_VERIFY_URL = "https://api.jisuapi.com/invoiceverify/verify"
INVOICE_TYPE_URL = "https://api.jisuapi.com/invoiceverify/type"

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

The skill transmits invoice data, which may include sensitive financial and tax information, to a third-party API service without any user-facing disclosure or consent mechanism. Even though the transmission uses HTTPS and appears necessary for functionality, this creates a privacy and data-governance risk because users may not realize their invoice details are leaving the local environment.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 86% confidence

Finding

The natural-language description and inline documentation are presented in Chinese, but the file does not indicate that the skill is region-specific or provide an option for users who need another language. Under the policy, forcing a specific language without opt-in can be a locale-policy issue.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.