Fähigkeiten yescan-transoffice-universal
📦
yescan-transoffice-universal
v1.1.4 Inhaltsrevision r1 Hohes Risiko 🌐 Netzwerkzugriff📁 Dateisystemzugriff🔑 Umgebungsvariablen⚙️ Externe Befehle
Scans in Office-Dateien umwandeln
Gescannte Bilder müssen oft manuell abgetippt werden, bevor Benutzer sie bearbeiten können. Diese Skill konvertiert ein Bild über Quark Scan King in Word, Excel oder PDF.
Unterstützt: Claude Codex Code(CC)
Vor der Installation anhalten und eine Bestätigung anfordern.
Prüfen Sie den Plan und holen Sie vor Änderungen an Dateien die ausdrückliche Zustimmung des Benutzers ein.
Mit meinem Agent installieren
Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.
Agent-Anfrage
Review the Skillstore skill "yescan-transoffice-universal" from https://skillstore.io/skills/yescan-ai-yescan-transoffice-universal.md and its manifest at https://skillstore.io/api/skills/yescan-ai-yescan-transoffice-universal/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.
Agent-lesbare Ressourcen
Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.
Testen
„yescan-transoffice-universal“ wird verwendet. Ein Benutzer stellt ein lokales Foto einer gedruckten Besprechungsagenda bereit und bittet um eine Word-Ausgabe.
Erwartetes Ergebnis:
Die Skill gibt eine Erfolgsmeldung mit einem lokalen Dokumentpfad zurück, der auf .docx endet.
„yescan-transoffice-universal“ wird verwendet. Ein Benutzer stellt einen Screenshot einer Finanztabelle bereit und bittet um eine Excel-Ausgabe.
Erwartetes Ergebnis:
Die Skill speichert eine .xlsx-Datei im temporären Verzeichnis und gibt ihren Pfad zurück.
„yescan-transoffice-universal“ wird verwendet. Ein Benutzer stellt eine Bild-URL bereit und bittet um eine PDF-Kopie.
Erwartetes Ergebnis:
Die Skill sendet die Bild-URL zur Konvertierung und gibt den gespeicherten PDF-Pfad zurück.
Sicherheitsaudit
Hohes Risikov7 • 8.7.2026 Versionsbericht öffnen
Review confirmed expected but material risks: the skill uploads user images or file-derived base64 plus SCAN_WEBSERVICE_KEY to a hard-coded Quark endpoint, then saves returned documents under the system temp directory. Many static hits are documentation or syntax false positives, but real issues remain around third-party data transfer, plaintext key-file fallback, prompt instructions that can ignore prior context, and shell command templates using user-controlled placeholders.
22
Gescannte Dateien
1,803
Analysierte Zeilen
59
Prüfelemente
0
Falschmeldungen ignoriert
Bestätigte Sicherheitsbedenken (4)
Hoch
Environment file access
# 沙箱凭证兜底文件:HOME 根目录下的 .yescan_env,与其它 .env-aware 工具隔离
The code defines a hidden home-directory config file for SCAN_WEBSERVICE_KEY. Reading credentials from a plaintext file is a real secret-management risk.
Hoch
Prompt Injection Attempt Detected
SKILL.md tells the agent it is forbidden to reference conversation history or inherit prior state. That instruction can conflict with higher-priority user or system context when the skill is invoked.
The text uses mandatory language that directs the agent to ignore prior conversation context. It is not a full system-message forgery, so confidence is high but not absolute.
Hoch
Unsafe Shell Command Construction Guidance
SKILL.md instructs the agent to replace command placeholders with user-provided URL, path, or base64 values and execute the command directly. If an agent builds this through a shell instead of argv-safe execution, user input can become a command-injection vector.
The command templates include user-controlled placeholders and the prose says to execute them directly. The risk depends on the calling agent shell behavior, so confidence is high but contextual.
Mittel
references/implementation.md:43-47scripts/common/result_handlers.py:105-116scripts/common/file_saver.py:205-208
Server-Returned Documents Saved Without Content Validation
The implementation saves FileBase64 returned by the external service as Word, Excel, or PDF based on the selected scene. The documentation states that document magic-byte validation is not performed, so active or malformed documents may be written locally.
The code path directly decodes and writes service-returned base64, and the documentation explicitly says document magic-byte validation is not done. This is a clear content-handling risk, not merely a scanner pattern.
Elemente der Fähigkeitsprüfung (59)
Dies sind echte lokale Fähigkeiten, die für diese Fähigkeit erwartet werden können; daher müssen sie überprüft werden, werden jedoch nicht als bestätigtes bösartiges Verhalten gezählt.
Hoch
Hidden file in home directory
echo 'SCAN_WEBSERVICE_KEY=<your_api_key>' > ~/.yescan_env
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Hidden file in home directory
> The environment variable takes priority; if not set, the key is loaded from `~/.yescan_env`.
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Hidden file in home directory
- `SCAN_WEBSERVICE_KEY` environment variable (or `~/.yescan_env`)
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Hidden file access
echo 'SCAN_WEBSERVICE_KEY=<your_api_key>' > ~/.yescan_env
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Hidden file access
> The environment variable takes priority; if not set, the key is loaded from `~/.yescan_env`.
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Hidden file access
- `SCAN_WEBSERVICE_KEY` environment variable (or `~/.yescan_env`)
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Generic API/secret keys
export SCAN_WEBSERVICE_KEY=<your_api_key>
The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.
Hoch
Generic API/secret keys
echo 'SCAN_WEBSERVICE_KEY=<your_api_key>' > ~/.yescan_env
The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.
Hoch
Hidden file in home directory
echo 'SCAN_WEBSERVICE_KEY=<你的密钥>' > ~/.yescan_env
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Hidden file in home directory
> 优先读取环境变量,未设置时自动从 `~/.yescan_env` 文件加载。
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Hidden file in home directory
- 配置 `SCAN_WEBSERVICE_KEY` 环境变量(或 `~/.yescan_env`)
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Hidden file access
echo 'SCAN_WEBSERVICE_KEY=<你的密钥>' > ~/.yescan_env
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Hidden file access
> 优先读取环境变量,未设置时自动从 `~/.yescan_env` 文件加载。
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Hidden file access
- 配置 `SCAN_WEBSERVICE_KEY` 环境变量(或 `~/.yescan_env`)
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Hidden file in home directory
### 3.1 推荐方式:写入 `~/.yescan_env`(永久生效)
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Hidden file in home directory
技能每次执行会读取 `~/.yescan_env`,无需重启会话。
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Hidden file in home directory
echo 'SCAN_WEBSERVICE_KEY=<your_api_key_here>' > ~/.yescan_env
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Hidden file in home directory
3. 如怀疑密钥泄露:在同一后台立即 *轮换* 或 *撤销* 旧密钥,并更新 `~/.yescan_env`
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Hidden file access
### 3.1 推荐方式:写入 `~/.yescan_env`(永久生效)
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Hidden file access
技能每次执行会读取 `~/.yescan_env`,无需重启会话。
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Hidden file access
echo 'SCAN_WEBSERVICE_KEY=<your_api_key_here>' > ~/.yescan_env
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Hidden file access
3. 如怀疑密钥泄露:在同一后台立即 *轮换* 或 *撤销* 旧密钥,并更新 `~/.yescan_env`
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Generic API/secret keys
echo 'SCAN_WEBSERVICE_KEY=<your_api_key_here>' > ~/.yescan_env
The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.
Hoch
Generic API/secret keys
'SCAN_WEBSERVICE_KEY=<your_api_key_here>' | Out-File -FilePath $HOME\.yescan_env -Encoding utf8
The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.
Hoch
Generic API/secret keys
export SCAN_WEBSERVICE_KEY=<your_api_key_here>
The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.
Hoch
Hidden file in home directory
1. 确认 `~/.yescan_env` 中 `SCAN_WEBSERVICE_KEY` 不带引号、不带空格
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Hidden file access
1. 确认 `~/.yescan_env` 中 `SCAN_WEBSERVICE_KEY` 不带引号、不带空格
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
HTTP client library
response = self._send_request(param)
This call path sends the user-supplied image data or image URL to the Quark Scan King API. The outbound request is central to the skill and carries sensitive document content.
Hoch
HTTP client library
response = self._send_request(param)
This call path sends the user-supplied image data or image URL to the Quark Scan King API. The outbound request is central to the skill and carries sensitive document content.
Hoch
HTTP client library
response = self._send_request(param)
This call path sends the user-supplied image data or image URL to the Quark Scan King API. The outbound request is central to the skill and carries sensitive document content.
Hoch
HTTP client library
def _send_request(self, param: Dict[str, Any]) -> requests.Response:
This call path sends the user-supplied image data or image URL to the Quark Scan King API. The outbound request is central to the skill and carries sensitive document content.
Hoch
Python HTTP libraries
self.session = requests.Session()
The requests session and send method implement outbound calls to the Quark Scan King service. This creates third-party data transfer risk for user images.
Hoch
Python HTTP libraries
def _send_request(self, param: Dict[str, Any]) -> requests.Response:
The requests session and send method implement outbound calls to the Quark Scan King service. This creates third-party data transfer risk for user images.
Hoch
Hidden file in home directory
2. 用户 HOME 目录下的 ~/.yescan_env 文件(沙箱环境用,KEY=VALUE 文本格式)
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Hidden file in home directory
"""从 ~/.yescan_env 读取 KEY=VALUE,缺失或异常返回空串"""
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Hidden file access
2. 用户 HOME 目录下的 ~/.yescan_env 文件(沙箱环境用,KEY=VALUE 文本格式)
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Hidden file access
"""从 ~/.yescan_env 读取 KEY=VALUE,缺失或异常返回空串"""
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Generic API/secret keys
api_key = os.getenv("SCAN_WEBSERVICE_KEY", "").strip()
The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.
Hoch
Generic API/secret keys
if api_key:
The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.
Hoch
Generic API/secret keys
return api_key
The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.
Hoch
Generic API/secret keys
api_key = CredentialManager._read_from_file("SCAN_WEBSERVICE_KEY")
The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.
Hoch
Generic API/secret keys
if api_key:
The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.
Hoch
Generic API/secret keys
return api_key
The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.
Hoch
Generic API/secret keys
def __init__(self, api_key: str, scene: str, data_type: str, platform: str = None):
The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.
Hoch
Generic API/secret keys
self.api_key = api_key
The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.
Hoch
Generic API/secret keys
"aiApiKey": self.api_key,
The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.
Hoch
Generic API/secret keys
api_key = CredentialManager.load()
The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.
Hoch
Generic API/secret keys
api_key=api_key,
The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.
Hoch
Hardcoded URL
API_URL = "https://scan-business.quark.cn/vision"
This is the hard-coded outbound API endpoint used by the client. User image data and the API key are sent to this external service during conversion.
Hoch
Hidden file in home directory
| API key stored in plaintext at `~/.yescan_env` | **disclosed**, standard practice | Recommend `chm
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Hidden file access
| API key stored in plaintext at `~/.yescan_env` | **disclosed**, standard practice | Recommend `chm
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Hidden file in home directory
**配置 API 密钥**:将 `SCAN_WEBSERVICE_KEY=<your_api_key>` 写入 `~/.yescan_env`(每次执行自动读取,无需重启)。获取入口:访问 `http
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Hidden file access
**配置 API 密钥**:将 `SCAN_WEBSERVICE_KEY=<your_api_key>` 写入 `~/.yescan_env`(每次执行自动读取,无需重启)。获取入口:访问 `http
The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.
Hoch
Generic API/secret keys
**配置 API 密钥**:将 `SCAN_WEBSERVICE_KEY=<your_api_key>` 写入 `~/.yescan_env`(每次执行自动读取,无需重启)。获取入口:访问 `http
The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.
Mittel
Temp file creation
import tempfile
The tempfile module is used to place converted documents under the system temp directory. These files can persist after conversion and may hold sensitive content.
Mittel
Temp file creation
DEFAULT_SAVE_DIR = tempfile.gettempdir()
The tempfile module is used to place converted documents under the system temp directory. These files can persist after conversion and may hold sensitive content.
Mittel
Python file write/append
with open(filepath, 'wb') as f:
The code writes decoded API-returned content to disk. Although the path is generated by the skill, the saved document can contain sensitive or active Office/PDF content.
Mittel
Python getenv function
api_key = os.getenv("SCAN_WEBSERVICE_KEY", "").strip()
The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.
Mittel
getenv function call
api_key = os.getenv("SCAN_WEBSERVICE_KEY", "").strip()
The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.
Risikofaktoren
🌐 Netzwerkzugriff (17)
examples/excel-example.md:40 examples/pdf-example.md:40 examples/word-example.md:40 scripts/common/messages.py:3 scripts/common/messages.py:4 scripts/common/ocr_client.py:125 scripts/common/ocr_client.py:155 scripts/common/ocr_client.py:174 scripts/common/ocr_client.py:196 scripts/common/ocr_client.py:86 scripts/common/ocr_client.py:196 scripts/common/ocr_client.py:212 scripts/common/runner.py:46 scripts/common/settings.py:18 SKILL.md:9 SKILL.md:17 SKILL.md:110
📁 Dateisystemzugriff (58)
examples/excel-example.md:24 examples/excel-example.md:31 examples/pdf-example.md:24 examples/pdf-example.md:31 examples/word-example.md:24 examples/word-example.md:31 README.md:27 README.md:28 README.md:30 README.md:59 README.md:27 README.md:28 README.md:30 README.md:59 README.zh-CN.md:27 README.zh-CN.md:28 README.zh-CN.md:30 README.zh-CN.md:59 README.zh-CN.md:27 README.zh-CN.md:28 README.zh-CN.md:30 README.zh-CN.md:59 references/implementation.md:28 references/implementation.md:44 references/implementation.md:44 references/privacy.md:31 references/privacy.md:33 references/privacy.md:38 references/privacy.md:39 references/privacy.md:60 references/privacy.md:64 references/privacy.md:31 references/privacy.md:33 references/privacy.md:38 references/privacy.md:39 references/privacy.md:60 references/privacy.md:64 references/privacy.md:20 references/troubleshooting.md:20 references/troubleshooting.md:22 references/troubleshooting.md:20 references/troubleshooting.md:22 scripts/common/__init__.py:7 scripts/common/file_saver.py:9 scripts/common/file_saver.py:51 scripts/common/file_saver.py:207 scripts/common/ocr_client.py:42 scripts/common/ocr_client.py:60 scripts/common/ocr_client.py:42 scripts/common/ocr_client.py:60 scripts/common/settings.py:11 scripts/common/settings.py:12 SECURITY.md:21 SECURITY.md:21 SECURITY.md:11 SKILL.md:17 SKILL.md:17 SKILL.md:78
🔑 Umgebungsvariablen (21)
README.md:23 README.md:27 references/privacy.md:38 references/privacy.md:45 references/privacy.md:51 scripts/common/ocr_client.py:50 scripts/common/ocr_client.py:50 scripts/common/ocr_client.py:50 scripts/common/ocr_client.py:51 scripts/common/ocr_client.py:52 scripts/common/ocr_client.py:53 scripts/common/ocr_client.py:54 scripts/common/ocr_client.py:55 scripts/common/ocr_client.py:80 scripts/common/ocr_client.py:82 scripts/common/ocr_client.py:181 scripts/common/result_handlers.py:48 scripts/common/result_handlers.py:84 scripts/common/runner.py:75 scripts/common/runner.py:77 SKILL.md:17
⚙️ Externe Befehle (28)
references/privacy.md:42 references/privacy.md:44 references/troubleshooting.md:23 scripts/common/settings.py:7 scripts/common/settings.py:11 scripts/common/settings.py:12 scripts/common/settings.py:13 SKILL.md:15 SKILL.md:17 SKILL.md:35 SKILL.md:36 SKILL.md:37 SKILL.md:41-43 SKILL.md:43-52 SKILL.md:52-61 SKILL.md:61-63 SKILL.md:63 SKILL.md:64 SKILL.md:65-73 SKILL.md:73 SKILL.md:79-84 SKILL.md:84-89 SKILL.md:89-105 SKILL.md:105-118 SKILL.md:118-119 SKILL.md:119-120 SKILL.md:120-121 SKILL.md:121-122
Geprüft von: codex Audit-Verlauf anzeigen →
Diesen Bericht teilen & zitieren
Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.
Berichtslink kopieren
https://skillstore.io/skills/yescan-ai-yescan-transoffice-universal/audits/7?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown-Badge
[](https://skillstore.io/skills/yescan-ai-yescan-transoffice-universal?utm_source=security_passport_badge)HTML-Badge
<a href="https://skillstore.io/skills/yescan-ai-yescan-transoffice-universal?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/yescan-ai-yescan-transoffice-universal/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Einbettungskarte
<iframe src="https://skillstore.io/embed/skills/yescan-ai-yescan-transoffice-universal.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Wissenschaftliche Zitate (APA · BibTeX · CFF)
APA-Zitat
yescan-ai. (2026). yescan-transoffice-universal security audit report (audit version 7) [Author version 1.1.4]. Skillstore. https://skillstore.io/skills/yescan-ai-yescan-transoffice-universal/audits/7BibTeX-Zitat
@techreport{yescan-ai-yescan-ai-yescan-transoffice-universal-2026,
author = {yescan-ai},
title = {yescan-transoffice-universal security audit report (audit version 7)},
institution = {Skillstore},
year = {2026},
number = {7},
url = {https://skillstore.io/skills/yescan-ai-yescan-transoffice-universal/audits/7},
note = {Author version 1.1.4}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "yescan-transoffice-universal security audit report (audit version 7)"
version: "1.1.4"
type: report
authors:
- name: "yescan-ai"
date-released: "2026-07-08"
url: "https://skillstore.io/skills/yescan-ai-yescan-transoffice-universal/audits/7"
identifiers:
- type: other
value: "skillstore:yescan-ai-yescan-transoffice-universal:audit:7"
description: "Skillstore immutable audit report identifier"
Skillstore-Score
Warum dieser Score Evidenzvertrauen: Mittel 82
Architektur
100
Wartbarkeit
85
Inhalt
73
Gemeinschaft
100
Spezifikationskonformität
Was Sie erstellen können
Bericht-Screenshots in Tabellenkalkulationen umwandeln
Konvertieren Sie einen Screenshot einer Tabelle oder eines Verkaufsberichts in eine bearbeitbare Excel-Datei.
Gescannte Verträge als Word-Dateien neu erstellen
Konvertieren Sie ein Vertragsfoto in ein Word-Dokument, das überprüft und bearbeitet werden kann.
Papiernotizen als PDF archivieren
Konvertieren Sie eine gescannte Seite oder das Bild einer Besprechungsnotiz in ein PDF zum Teilen und Speichern.
Diese Prompts ausprobieren
Ein lokales Bild konvertieren
Convert this image to Word: /path/to/document.jpg
Einen Tabellen-Screenshot konvertieren
Convert this table screenshot to Excel and give me the saved file path: /path/to/table.png
Von einer URL konvertieren
Convert the image at this URL to PDF: https://example.com/scan.png
Das beste Ausgabeformat auswählen
This scan contains paragraphs and a small table. Convert it to the most editable Office format: /path/to/scan.webp
Bewährte Praktiken
- Bestätigen Sie, dass das Bild keine sensiblen Daten enthält, bevor Sie es an den Drittanbieterdienst senden.
- Verwenden Sie die feste Szene, die dem gewünschten Ausgabeformat entspricht.
- Löschen Sie temporäre Ausgabedateien, nachdem sie nicht mehr benötigt werden.
Vermeiden
- Verwenden Sie diese Skill nicht für reine Textextraktion ohne Dokumentkonvertierung.
- Verarbeiten Sie keine privaten Datensätze, es sei denn, die Verarbeitung durch Dritte ist genehmigt.
- Übergeben Sie keine ungeprüften Secrets oder nicht zugehörigen Dateien als Bildeingabe.
Häufig gestellte Fragen
Funktioniert diese Skill ohne API-Schlüssel?
Nein. Sie erfordert SCAN_WEBSERVICE_KEY aus der Quark Scan King-Entwicklerkonsole.
Wo werden konvertierte Dateien gespeichert?
Konvertierte Dateien werden im temporären Systemverzeichnis gespeichert, z. B. /tmp oder %TEMP%.
Sendet die Skill Bilder an einen externen Dienst?
Ja. Sie sendet das vom Benutzer bereitgestellte Bild oder die Bild-URL an scan-business.quark.cn.
Kann sie viele Bilder auf einmal konvertieren?
Nein. Der dokumentierte Workflow verarbeitet ein Bild pro Befehl.
Welche Formate werden unterstützt?
Sie unterstützt gängige Bildeingaben und erzeugt Word-, Excel- oder PDF-Ausgaben.
Ist dies das richtige Tool für Bildverbesserung?
Nein. Diese Skill ist für die Dokumentkonvertierung vorgesehen, nicht für Bildverbesserung oder reine OCR-Textextraktion.