全球电子发票合作伙伴甄选

v1.1.0

当用户需要为某个目标国家寻找、筛选或评估本地电子发票合规通道合作伙伴时,使用本 Skill。 覆盖场景:识别和筛选本地 e-invoicing 接入点(AP/SP/T-VAN/ASP/PJAP/SDI中间商)合作伙伴、 评估候选方是否适合作为我方的白标底层通道、对候选方开展多轮过滤和反向证伪、 设计POC验收方案...

0· 41·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The name/description (partner selection for e‑invoicing) align with the content: SKILL.md and the three reference files specify regulatory references, scoring matrices and POC scripts. The operations the skill requires (reading local reference files, performing web searches / fetching official registries, and producing a .docx report) are appropriate and expected for this purpose. No unrelated environment variables, binaries, or external services are requested.
Instruction Scope
The runtime instructions explicitly require reading bundled reference files and live web fetching of official registries and candidate websites; this is coherent with the task. Minor note: the SKILL.md/README assume the agent environment provides internet access, URL‑fetch and a docx‑generation capability — these capabilities are necessary for correct operation but are not expressed as declared required platform capabilities in the registry metadata. The skill does not instruct the agent to read arbitrary system files or request secrets beyond public web fetches and local reference reads.
Install Mechanism
Instruction-only skill with no install spec and no code files to execute. There is no download, no package installation, and no archive extraction. That minimizes on‑disk persistence risk.
Credentials
The skill requests no environment variables, no credentials, and no config paths. The README notes it needs internet and filesystem access (to the included reference files) and a docx capability; these are proportional and expected for the described research and report generation workflow. There are no hidden credential requests.
Persistence & Privilege
The skill is not always-enabled (always:false) and does not request elevated/platform‑wide persistence. It reads files from its own reference directory only and specifies generating a .docx output; it does not attempt to modify other skills or agent configuration.
Assessment
This skill is internally coherent for conducting partner selection research, but review a few practical points before enabling it: 1) Ensure the agent environment allows controlled web access and URL fetching only (the skill needs live registry lookups and website checks). 2) Confirm the platform provides a docx generation tool or equivalent (the skill expects to produce a .docx report). 3) The skill includes preloaded reference data for six markets — verify those entries are current and acceptable for your use; the SKILL itself emphasizes that legal questions (e.g., multi‑tenant PKI legality, data‑localization) require local counsel and written confirmation. 4) The skill does not request secrets or system credentials; avoid supplying any unrelated credentials when using it. 5) If you have organizational policies restricting outbound network access or automated scraping, run the skill in a supervised/manual mode and validate the URLs it will fetch first.

Like a lobster shell, security has layers — review code before you run it.

latestvk97777epj606sq407z5ft1yy1984ac9w

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments