Security audit
Security checks for vulnerabilities and agentic risk
This is a simple invoice and reimbursement organization skill with no code execution, network access, credential use, persistence, or hidden behavior found.
Before installing, be aware that this skill is meant for reimbursement and invoice整理 only. Avoid sharing unnecessary personal, tax, or business-sensitive details, and verify tax or reimbursement conclusions with your accountant, company policy, or the relevant authority. The broad trigger examples could route a generic table-formatting request into this skill, so invoke it deliberately for invoice or reimbursement tasks.
The trigger examples include short, generic phrases like “报销单” and “财务报销” that are common in ordinary conversation and may activate the skill when the user did not explicitly intend to invoke it. In a finance-related skill, unintended activation can expose sensitive invoice or reimbursement details to the wrong workflow and cause privacy or data-handling issues.
The natural-language examples are broad and could match many routine requests, such as ‘把这些整理成一张表’, which is not unique to invoice processing. This increases the risk of accidental routing of unrelated or sensitive business content into the skill, especially because the skill handles financial and potentially personal data.
No suspicious patterns detected.
