ClawHub
Back to skill

Security audit

发票识别-发票查验-发票OCR（翔云开放平台）

Security checks across malware telemetry and agentic risk

Overview

This skill coherently performs invoice OCR, verification through NetOCR, and optional Excel export, with sensitive data handling disclosed enough to keep it benign but worth user caution.

Install only if you are allowed to send the target invoices and NetOCR credentials to netocr.com. Use a dedicated API key where possible, keep config.json private, request '仅识别/不查验' when you do not want online verification, and handle generated .invoice_result.json, .verify_result.json, and .xlsx files as sensitive financial records.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (10)

Vague Triggers

Medium
Confidence
78% confidence
Finding
The trigger list includes broad finance/export phrases such as 发票导出, 发票台账, 发票入账表, and 发票勾选抵扣, which may match routine bookkeeping requests without clearly requiring that the user intends to invoke this external OCR/verification workflow. Over-broad activation can cause unintended processing of sensitive invoice files, network transmission to netocr.com, and file generation when a narrower or local-only response may have been appropriate.

Vague Triggers

Medium
Confidence
84% confidence
Finding
The execution guidance says that generic intents like 识别, OCR, and 扫描发票 should default to running recognition plus online verification, which is an expansive default for sensitive tax documents. Because verification transmits extracted invoice fields to a remote service, ambiguous phrasing can lead to unintended external processing and potential privacy/compliance issues without sufficiently specific user intent.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The script uploads invoice images and extracted invoice data to a third-party OCR/verification service without an explicit warning or consent gate at the point of transmission. Because invoices commonly contain sensitive financial and personal data, silent exfiltration to an external service can violate user expectations, internal policy, or regulatory requirements.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The script persists API credentials to config.json automatically after prompting, but does not clearly warn the user that secrets will be stored locally on disk. On multi-user systems or in weakly protected workspaces, this can expose long-lived third-party API credentials to other local users, backups, or accidental commits.

Unpinned Dependencies

Low
Category
Supply Chain
Content
requests>=2.28.0
openpyxl>=3.1.0
Pillow>=9.0.0
Confidence
95% confidence
Finding
requests>=2.28.0

Unpinned Dependencies

Low
Category
Supply Chain
Content
requests>=2.28.0
openpyxl>=3.1.0
Pillow>=9.0.0
Confidence
95% confidence
Finding
openpyxl>=3.1.0

Unpinned Dependencies

Low
Category
Supply Chain
Content
requests>=2.28.0
openpyxl>=3.1.0
Pillow>=9.0.0
Confidence
98% confidence
Finding
Pillow>=9.0.0

Known Vulnerable Dependency: requests — 10 advisory(ies): CVE-2014-1830 (Exposure of Sensitive Information to an Unauthorized Actor in Requests); CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi) +7 more

High
Category
Supply Chain
Confidence
87% confidence
Finding
requests

Known Vulnerable Dependency: openpyxl — 2 advisory(ies): CVE-2017-5992 (Improper Restriction of XML External Entity Reference in Openpyxl); CVE-2017-5992 (Openpyxl 2.4.1 resolves external entities by default, which allows remote attack)

High
Category
Supply Chain
Confidence
91% confidence
Finding
openpyxl

Known Vulnerable Dependency: Pillow — 10 advisory(ies): CVE-2016-2533 (Pillow buffer overflow in ImagingPcdDecode); CVE-2023-50447 (Arbitrary Code Execution in Pillow); CVE-2021-27922 (Pillow Uncontrolled Resource Consumption) +7 more

Critical
Category
Supply Chain
Confidence
97% confidence
Finding
Pillow

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.insecure_tls_verification

HTTPS certificate verification is disabled.

Warn
Code
suspicious.insecure_tls_verification
Location
scripts/invoice.py:656