Receipt Snap

Process receipt photos and PDFs, extract vendor date amount currency, convert to EUR, upload to Google Drive with proper naming Vendor_Date_EURAmount.pdf, an...

Security Scan

The skill's code, install, and runtime instructions are consistent with its stated purpose (processing receipts, converting currency, uploading to Google Drive, and logging to Google Sheets); no disproportionate or unrelated permissions or suspicious network endpoints were found, though there is a minor metadata inconsistency to be aware of.

Purpose & Capability

The skill's claimed purpose (receipt extraction, currency conversion, Drive upload, Sheets logging) aligns with the required binary (gog), the provided code, and the SKILL.md instructions. Minor inconsistency: the registry summary at the top lists no required environment variables, but SKILL.md and the script clearly require RECEIPT_DRIVE_FOLDER_ID and RECEIPT_GOOGLE_SHEET_ID (and optionally RECEIPT_LOG_FILE). This appears to be a packaging/metadata omission rather than malicious misdirection.

Instruction Scope

SKILL.md instructs only to install gog, authenticate it, set the Drive/Sheet IDs, fetch exchange rates from open.er-api.com, check the sheet for duplicates, upload files via gog, and append rows to Sheets. The runtime instructions and code do not request unrelated system files or external endpoints beyond the exchange-rate API and Google via gog.

Install Mechanism

Installation uses a Homebrew formula (faradayhq/gog/gog) to provide the gog CLI. This is a normal package installation method; no arbitrary URL downloads or extraction steps are present in the spec.

Credentials

Environment variables required by the script (Drive folder ID, Sheet ID, optional local log path) are appropriate and proportional to the functionality. Note the manifest/registry summary omitted these env vars—verify the skill will prompt you to set them (SKILL.md does). The skill relies on gog-managed OAuth tokens rather than asking for raw credentials, which is appropriate.

Persistence & Privilege

The skill does not request always:true, does not modify other skills, and does not demand elevated system privileges. It writes a local CSV log (configurable via RECEIPT_LOG_FILE) and uses gog to store items in the user's Google Drive/Sheets as expected.

Assessment

This skill appears to do what it says: it calls the gog CLI to upload files to Google Drive and append rows to Google Sheets, and it fetches exchange rates from open.er-api.com. Before installing, confirm: 1) you trust the Homebrew formula (faradayhq/gog/gog) and run 'gog auth login' yourself so OAuth tokens stay under your control; 2) set RECEIPT_DRIVE_FOLDER_ID and RECEIPT_GOOGLE_SHEET_ID (and optionally RECEIPT_LOG_FILE) — the top-level registry metadata omitted these even though the skill requires them; 3) review and secure the local log file path (it contains financial data) and add it to .gitignore if storing in a repo; 4) if you want additional assurance, inspect receipt_snap.py locally (it uses subprocess to call gog and urllib to fetch exchange rates) before use. If any of these steps or the brew formula look unfamiliar, investigate the gog package source and verify the Drive/Sheet IDs before using the skill with real receipts.

Receipt Snap Skill

Process receipts for tax reporting. Handles receipt capture, currency conversion, Drive storage, and logging to Google Sheets.

Setup

1. Install gog CLI

brew install faradayhq/gog/gog
gog auth login

2. Set environment variables

Variable	Required	Description
RECEIPT_DRIVE_FOLDER_ID	Yes	Google Drive folder ID for uploads
RECEIPT_GOOGLE_SHEET_ID	Yes	Google Sheet ID for log rows
RECEIPT_LOG_FILE	No	Local CSV backup path (default: ~/receipts/log.csv)

3. Google Drive & Sheets setup

Drive: Create a folder, share it with the Google account authenticated in gog, copy the folder ID from the URL.

Sheets: Create a sheet with a tab named log, add headers in row 1: Date | Vendor | Description | Original Amount | Currency | EUR Amount | Exchange Rate | Category | Drive Link | Notes. Copy the Sheet ID from the URL.

Model Usage

Use local model (free) for simple receipts. Escalate to MiniMax for ambiguous receipts (handwritten, poor lighting).

Workflow

1. Receive Receipt

User sends receipt via Telegram with #recibo tag. Accepts:

• PDF invoices
• Photo screenshots of receipts
• Text descriptions (#recibo Description: ...)

2. Extract Data

Extract from receipt:

• Vendor (company name)
• Date (invoice date)
• Amount (total including VAT)
• Currency (EUR, USD, etc.)
• Description (what was purchased)

3. Check for Duplicates

Before processing, check if this receipt already exists:

gog sheets get "$RECEIPT_GOOGLE_SHEET_ID" "log!A:J" --json

Search for matching vendor + date + amount. If duplicate found → warn user and ask before proceeding.

4. Currency Conversion

If non-EUR:

• Fetch rate from https://open.er-api.com/v6/latest/{currency}
• Convert to EUR
• Log both original and EUR amounts

5. Categorize

Spanish tax categories:

• Software y suscripciones — SaaS, API credits, subscriptions
• Telecomunicaciones — phone, voicemail
• Combustibles — fuel, gas
• Viajes y desplazamientos — travel, mileage
• Manutención y restauración — meals (business)
• Material informáticos — hardware
• Formación — courses, education
• Otros gastos — other

6. Upload to Google Drive

gog drive upload <file> --parent "$RECEIPT_DRIVE_FOLDER_ID"
gog drive rename <file-id> "VendorName_2026-01-15_42.50EUR.pdf"

7. Log to Google Sheet

gog sheets append "$RECEIPT_GOOGLE_SHEET_ID" "log!A:J" \
  --values-json '[["2026-01-15","Vendor Name","Description","42.50","EUR","42.50","1.0","Software y suscripciones","https://drive.google.com/...","Notes"]]' \
  --insert INSERT_ROWS

8. Quarterly Report

At quarter-end:

• Generate category summary: python3 receipt_snap.py summary
• Zip receipt images from Drive
• Send summary + ZIP to your tax accountant

Commands

Process receipt

python3 receipt_snap.py process receipt.pdf \
  --vendor "Vendor Name" \
  --date 2026-01-15 \
  --amount 42.50 \
  --currency EUR \
  --category "Software y suscripciones"

Summary

python3 receipt_snap.py summary

Exchange rate

python3 receipt_snap.py exchange-rate

Sheet Setup

Create a Google Sheet with a tab named log. Add this header row (A through J):

| Date | Vendor | Description | Original Amount | Currency | EUR Amount | Exchange Rate | Category | Drive Link | Notes |

Security

• Add receipts/ and *.csv to .gitignore — contains real financial data
• Never hardcode IDs in source files — use environment variables
• gog manages OAuth tokens locally — verify your Google account is secure
• Files uploaded to Drive and rows appended to Sheets leave copies on Google services