Ai Intelligent Expense Reimbursement

自动化报销流程，票据识别 + 审批加速。

Security Scan

The skill's description matches an expense-reimbursement product, but the runtime instructions tell you to fetch and run external code without declaring the credentials or integrations that such a system would reasonably need.

Purpose & Capability

Name/description describe OCR, payment integration and financial API work. However the packaged skill declares no required env vars or credentials even though features like '自动打款' (automatic payments) and '财务 API 集成' would normally require API keys/credentials. The skill is instruction-only and points to an external GitHub repo not included in the package, so required capabilities/configuration are not self-contained or documented in metadata.

Instruction Scope

SKILL.md tells users to git clone a GitHub repo, pip install requirements, and run python app.py. It does not enumerate runtime configuration, what endpoints the app exposes, what data will be uploaded/processed, or what credentials are needed. The instructions grant broad discretion (run an external service that will handle invoices and payments) without specifying safety boundaries.

Install Mechanism

There is no formal install spec inside the skill bundle — instead SKILL.md instructs cloning https://github.com/openclaw-skills/ai-intelligent-expense-reimbursement and running it. GitHub is a common host, but the registry metadata lists source/homepage as unknown and the actual code is not included in the skill package; fetching and executing external code increases risk and requires manual review before running.

Credentials

The skill requests no environment variables or credentials in metadata, yet its described features (financial API integration, automatic payouts, invoice verification) would reasonably require sensitive secrets (payment API keys, accounting system tokens). This mismatch is a red flag: the skill may require secrets at runtime that are not declared or scoped.

Persistence & Privilege

The skill is not marked always:true and is instruction-only with no packaged binaries, so it does not request persistent elevated platform privileges. Autonomous model invocation is allowed by default but is not combined here with broad declared credentials or forced persistence.

What to consider before installing

This skill is an instruction-only wrapper that tells you to clone and run an external GitHub project to handle sensitive tasks (OCR, payments). Before installing or running it: 1) Inspect the referenced GitHub repository and all code (app.py, requirements.txt, any payment integrations) to confirm what the service does and which secrets it needs. 2) Do not run it with real production credentials — use an isolated/test environment and test accounts. 3) Verify how receipts and personal data are stored/transmitted and whether external endpoints are contacted. 4) Ask the publisher for a homepage/source verification and a list of exact env vars required; prefer skills that declare required credentials and include code in the package or a vetted release. If you cannot review the upstream code, treat running this skill as risky.

AI 智能报销管理系统

描述

自动化报销流程，票据识别 + 审批加速。

功能

• 票据识别（OCR自动识别）
• 智能审批（规则引擎）
• 费用分析（支出统计）
• 合规检查（发票验真）
• 自动打款（财务集成）

定价

• 基础版：¥99/月（100 单/月）
• 专业版：¥499/月（1000 单/月）
• 企业版：¥1999/月（无限单）

适用场景

• 企业报销
• 差旅费用
• 办公采购
• 员工福利

技术栈

• Python + FastAPI
• OCR（票据识别）
• 审批工作流
• 财务 API 集成

安装

git clone https://github.com/openclaw-skills/ai-intelligent-expense-reimbursement
cd ai-intelligent-expense-reimbursement
pip install -r requirements.txt
python app.py

---

创建：2026-03-13 作者：OpenClaw Skills Team