Accounting Skill

Process accounting documents — invoices (hóa đơn GTGT), purchase orders, and bank statements. Extract structured data from PDF (digital and scanned), JPG, an...

This skill appears to be what it says: local OCR + structured extraction. Before installing or running it: 1) Inspect scripts/ocr_utils.py (not fully shown here) to confirm it does not make network calls or upload data; 2) Run first uses in a controlled environment (or a copy of sensitive files) because the skill writes JSON backups containing raw OCR text and full source_file paths which may contain PII; 3) Install system OCR packages (tesseract, poppler) and review Python packages that 'uv run' will install; consider using a virtual environment; 4) Avoid blindly executing shell-eval of commands produced by classify_document (the README shows an eval example); instead run the suggested extractor programmatically or by copy/paste to avoid command injection if an attacker can supply malicious files; 5) Use --dry-run to preview parsed JSON before writing files. If you want higher assurance, share the full contents of scripts/ocr_utils.py and any remaining truncated files so they can be reviewed for network or other unexpected behavior.

Type: OpenClaw Skill Name: vn-accounting-skill Version: 0.1.0 The vn-accounting-skill bundle is a legitimate tool designed for processing accounting documents such as invoices, purchase orders, and bank statements. It utilizes standard libraries like pytesseract for OCR, pdfplumber for PDF parsing, and openpyxl for Excel generation. The code logic is transparent, follows the stated purpose in SKILL.md and README.md, and contains no evidence of data exfiltration, malicious execution, or prompt injection. All file operations are local and aligned with the document extraction workflow.