校验XML数电票

验证XML文件是否为中国数电票（全面数字化电子发票）格式。检查XML结构、必需字段和数电票特征。当用户需要验证XML是否为数电票、检查数电票格式合规性、或处理电子发票XML文件时使用。

This skill appears to do what it says (validate Chinese e-invoice XML) and does not ask for credentials, but before using it consider: 1) Don't run the script on untrusted XML in a sensitive environment — xml.etree.ElementTree.parse() can be unsafe for malicious XML; prefer defusedxml or explicitly disable DTD/entity processing. 2) The script prints invoice numbers and taxpayer IDs (sensitive PII); redact or run validation in a trusted/isolated environment if you care about privacy. 3) If you will integrate this into production, add robust namespace handling, input size limits, and explicit safe XML parsing to prevent DoS or XXE. If you need, I can suggest a hardened Python implementation that mitigates XXE and large-entity attacks and that redacts or masks PII in reports.

Type: OpenClaw Skill Name: validate-einvoice-xml Version: 1.0.0 The skill is designed to validate Chinese e-invoice (数电票) XML files. The provided Python script in SKILL.md uses standard libraries (xml.etree.ElementTree and re) to verify the XML structure and specific fields like the 20-digit invoice number and digital signatures. There is no evidence of malicious intent, data exfiltration, or unauthorized command execution.