发票识别（invoice-ocr-xy）翔云平台

• Verdict: Pass
• Confidence: Medium
• Analyzed: Apr 15, 2026, 8:35 AM
• Findings: 0
• Version: 2.0.0

Overview

The skill's code and instructions align with its stated purpose (calling 翔云/NetOCR to OCR invoices), but it stores user API keys in plaintext and auto-installs a Python package at runtime — review these privacy/installation choices before use.

This skill appears to do what it claims (upload invoice images to 翔云/NetOCR and return JSON/Excel). Before installing or using it: (1) only provide a NetOCR API key/secret that you trust and consider creating a limited/quota-limited key for this purpose; (2) be aware credentials are stored in plaintext in the skill's config.json (inspect and move to a safer storage if needed); (3) the script may auto-install openpyxl from PyPI at runtime — if you prefer, pre-install dependencies in a controlled environment; (4) review the script yourself (or run it in an isolated environment) if you have high security/privacy requirements; (5) verify the netocr.com endpoint and your account billing settings to avoid unexpected charges.