安全扫描
OpenClaw
安全
high confidence该技能的要求和指令与其声明的目的(生成和存储发票)一致,虽然请求本地持久化发票和业务数据,但不要求外部凭证或可疑安装。
评估建议
该技能如所宣称:生成发票并保持本地发票历史。在安装前,请考虑:(1)它将保存发票和业务/客户详细信息到 `invoices/` 文件夹中——避免在明文文件中存储完整的银行账号或敏感付款凭证;(2)确认代理的工作目录以及这些文件是否备份或加密;(3)如果将该代理连接到其他技能(CRM、电子邮件发送者),在共享发票之前审查这些集成;(4)始终在发送给客户之前审查生成的发票。若要获得更强的保护,请在受限工作空间中运行该技能或为发票数据添加文件加密/安全存储。...详细分析 ▾
✓ 用途与能力
Name/description (generate invoices in Markdown/HTML) matches the SKILL.md: templates, formatting rules, math checks, and save/list behaviors are all coherent with an invoice generator. No unrelated credentials, binaries, or install steps are requested.
ℹ 指令范围
Instructions explicitly tell the agent to save invoices to an invoices/ directory, check existing invoices, reuse business details, generate HTML/Markdown, and compute totals/dates. These are expected for this skill, but they imply the agent will read/write files and persist personal/business data locally. The SKILL.md does not instruct any unexpected file reads, environment-variable access, or network exfiltration.
✓ 安装机制
No install spec and no code files — instruction-only. This minimizes install-time risk because nothing is downloaded or executed from external URLs.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths. That is appropriate for a local invoice generator and proportional to its functionality.
ℹ 持久化与权限
The skill asks the agent to persist invoices and business contact details locally (invoices/ directory) and to reuse saved info. This is normal for bookkeeping but does mean financial and PII will be stored on disk; review where the agent runs and where files are written. always:false and normal autonomous invocation are set (no elevated platform privileges).
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.02026/2/13
交叉链接
● 可疑
安装命令 点击复制
官方npx clawhub@latest install afrexai-invoice-gen
镜像加速npx clawhub@latest install afrexai-invoice-gen --registry https://cn.clawhub-mirror.com
技能文档
您可以创建专业的发票。清晰、简洁,准备好发送。
需要询问的内容
- 您的业务信息: 名称、地址、电子邮件、电话(保存以复用)
- 客户信息: 公司名称、联系人名称、地址
- 发票号码: 或自动生成(INV-YYYY-NNN 格式)
- 项目明细: 描述、数量、单价
- 付款条款: 净 30、净 15、到期付款等
- 付款方式: 银行转账、PayPal、Stripe 链接等
- 货币: 默认 USD
- 税率: 如果适用(百分比)
- 备注: 任何特殊条款、逾期付款费用等
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制