by 安全扫描
OpenClaw
安全
high confidence该技能内部一致性强，用于账款管理和发票目的，运行包含的 Python 脚本对本地发票存档进行操作，仅使用标准库，不请求凭据，无安装步骤或外部端点。
评估建议
该技能逻辑清晰，通过两个包含的 Python 脚本实现发票工作流。安装前，请注意：（1）确认文件存储位置；（2）自行检查脚本；（3）考虑从验证仓库获取；（4）确保 Python 3.8+ 环境；（5）考虑限制自动执行或审查沙盒环境以确保代码执行安全。...详细分析 ▾
✓ 用途与能力
Name/description match what the skill implements: invoice generation, aging, collections and basic reconciliation. The files and declared behavior (templates, client/profile JSON, numbering and tracker scripts) are appropriate and proportional to that purpose.
ℹ 指令范围
SKILL.md instructs the agent to run the included Python scripts (invoice_tracker.py and invoice_numbering.py) and to read/write files under an invoices/ and optional contracts/ archive. This is coherent with invoicing functionality but means the agent will read and update local invoice metadata and write INDEX.json and .numbering-config.json in the invoices directory. No instructions reference unrelated system paths or external endpoints.
✓ 安装机制
No install specification. The skill is instruction+script only and relies on Python 3.8+ stdlib. No downloads or package installs are requested.
✓ 凭证需求
The skill declares no required environment variables, no credentials, and no config paths outside its project. The code operates on local files (invoices/, contracts/) which is expected for this functionality.
ℹ 持久化与权限
The skill is not always-enabled and does not request elevated privileges. It will create/update local artifacts (INDEX.json, .numbering-config.json and invoice metadata) in the invoices directory when run — normal for an invoicing tool but worth noting because those files are persisted to disk.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.02026/3/16
主要更新：增强发票生成和追踪功能
● 无害
安装命令
点击复制官方npx clawhub@latest install opc-invoice-manager
镜像加速npx clawhub@latest install opc-invoice-manager --registry https://cn.longxiaskill.com镜像同步中
技能文档
请见下方（由于内容过长，仅提供部分关键翻译，完整内容请根据原文自行翻译）