スキル yescan-transoffice-universal

📦

yescan-transoffice-universal

Name: yescan-transoffice-universal
Author: yescan-ai

v1.1.4 コンテンツリビジョン r1 高リスク 🌐 ネットワークアクセス📁 ファイルシステムへのアクセス🔑 環境変数⚙️ 外部コマンド

スキャン画像をOfficeファイルに変換

スキャン画像は、ユーザーが編集する前に手入力で再入力が必要になることがよくあります。このスキルは、Quark Scan Kingを通じて1つの画像をWord、Excel、またはPDFに変換します。

対応: Claude Codex Code(CC)

⚠️ 38 不十分

Maintain this Skill? Claim it ⚠️ 38 不十分

インストール前に停止して確認を求めてください。

計画を確認し、ファイルを変更する前にユーザーの明示的な同意を得てください。

自分のエージェントでインストール

このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。

エージェントリクエスト

Review the Skillstore skill "yescan-transoffice-universal" from https://skillstore.io/skills/yescan-ai-yescan-transoffice-universal.md and its manifest at https://skillstore.io/api/skills/yescan-ai-yescan-transoffice-universal/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。

エージェントが読めるリソース

AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。

Markdown詳細 GET /skills/yescan-ai-yescan-transoffice-universal.md 署名済み manifest GET /api/skills/yescan-ai-yescan-transoffice-universal/manifest 署名済み lockfile GET /api/skills/yescan-ai-yescan-transoffice-universal/lockfile

テストする

「yescan-transoffice-universal」を使用しています。ユーザーが印刷された会議アジェンダのローカル写真を提供し、Word出力を依頼します。

期待される結果:

このスキルは、.docxで終わるローカル文書パスを含む成功メッセージを返します。

「yescan-transoffice-universal」を使用しています。ユーザーが財務表のスクリーンショットを提供し、Excel出力を依頼します。

期待される結果:

このスキルは、一時ディレクトリに.xlsxファイルを保存し、そのパスを返します。

「yescan-transoffice-universal」を使用しています。ユーザーが画像URLを提供し、PDFコピーを依頼します。

期待される結果:

このスキルは、変換のために画像URLを送信し、保存されたPDFパスを返します。

セキュリティ監査

高リスク

v7 • 2026/7/8 バージョン別レポートを開く

Review confirmed expected but material risks: the skill uploads user images or file-derived base64 plus SCAN_WEBSERVICE_KEY to a hard-coded Quark endpoint, then saves returned documents under the system temp directory. Many static hits are documentation or syntax false positives, but real issues remain around third-party data transfer, plaintext key-file fallback, prompt instructions that can ignore prior context, and shell command templates using user-controlled placeholders.

スキャンされたファイル

1,803

解析済み行数

レビュー項目

誤検知を無視

確認済みのセキュリティ上の懸念 (4)

高

scripts/common/ocr_client.py:45

Environment file access

# 沙箱凭证兜底文件:HOME 根目录下的 .yescan_env,与其它 .env-aware 工具隔离

The code defines a hidden home-directory config file for SCAN_WEBSERVICE_KEY. Reading credentials from a plaintext file is a real secret-management risk.

高

SKILL.md:21-29

Prompt Injection Attempt Detected

SKILL.md tells the agent it is forbidden to reference conversation history or inherit prior state. That instruction can conflict with higher-priority user or system context when the skill is invoked.

The text uses mandatory language that directs the agent to ignore prior conversation context. It is not a full system-message forgery, so confidence is high but not absolute.

高

SKILL.md:50-66

Unsafe Shell Command Construction Guidance

SKILL.md instructs the agent to replace command placeholders with user-provided URL, path, or base64 values and execute the command directly. If an agent builds this through a shell instead of argv-safe execution, user input can become a command-injection vector.

The command templates include user-controlled placeholders and the prose says to execute them directly. The risk depends on the calling agent shell behavior, so confidence is high but contextual.

中

references/implementation.md:43-47 scripts/common/result_handlers.py:105-116 scripts/common/file_saver.py:205-208

Server-Returned Documents Saved Without Content Validation

The implementation saves FileBase64 returned by the external service as Word, Excel, or PDF based on the selected scene. The documentation states that document magic-byte validation is not performed, so active or malformed documents may be written locally.

The code path directly decodes and writes service-returned base64, and the documentation explicitly says document magic-byte validation is not done. This is a clear content-handling risk, not merely a scanner pattern.

機能レビュー項目 (59)

これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。

高

README.md:27

Hidden file in home directory

echo 'SCAN_WEBSERVICE_KEY=<your_api_key>' > ~/.yescan_env

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

README.md:30

Hidden file in home directory

> The environment variable takes priority; if not set, the key is loaded from `~/.yescan_env`.

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

README.md:59

Hidden file in home directory

- `SCAN_WEBSERVICE_KEY` environment variable (or `~/.yescan_env`)

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

README.md:27

Hidden file access

echo 'SCAN_WEBSERVICE_KEY=<your_api_key>' > ~/.yescan_env

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

README.md:30

Hidden file access

> The environment variable takes priority; if not set, the key is loaded from `~/.yescan_env`.

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

README.md:59

Hidden file access

- `SCAN_WEBSERVICE_KEY` environment variable (or `~/.yescan_env`)

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

README.md:23

Generic API/secret keys

export SCAN_WEBSERVICE_KEY=<your_api_key>

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

README.md:27

Generic API/secret keys

echo 'SCAN_WEBSERVICE_KEY=<your_api_key>' > ~/.yescan_env

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

README.zh-CN.md:27

Hidden file in home directory

echo 'SCAN_WEBSERVICE_KEY=<你的密钥>' > ~/.yescan_env

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

README.zh-CN.md:30

Hidden file in home directory

> 优先读取环境变量,未设置时自动从 `~/.yescan_env` 文件加载。

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

README.zh-CN.md:59

Hidden file in home directory

- 配置 `SCAN_WEBSERVICE_KEY` 环境变量(或 `~/.yescan_env`)

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

README.zh-CN.md:27

Hidden file access

echo 'SCAN_WEBSERVICE_KEY=<你的密钥>' > ~/.yescan_env

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

README.zh-CN.md:30

Hidden file access

> 优先读取环境变量,未设置时自动从 `~/.yescan_env` 文件加载。

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

README.zh-CN.md:59

Hidden file access

- 配置 `SCAN_WEBSERVICE_KEY` 环境变量(或 `~/.yescan_env`)

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

references/privacy.md:31

Hidden file in home directory

### 3.1 推荐方式:写入 `~/.yescan_env`(永久生效)

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

references/privacy.md:33

Hidden file in home directory

技能每次执行会读取 `~/.yescan_env`,无需重启会话。

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

references/privacy.md:38

Hidden file in home directory

echo 'SCAN_WEBSERVICE_KEY=<your_api_key_here>' > ~/.yescan_env

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

references/privacy.md:60

Hidden file in home directory

3. 如怀疑密钥泄露:在同一后台立即 *轮换* 或 *撤销* 旧密钥,并更新 `~/.yescan_env`

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

references/privacy.md:31

Hidden file access

### 3.1 推荐方式:写入 `~/.yescan_env`(永久生效)

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

references/privacy.md:33

Hidden file access

技能每次执行会读取 `~/.yescan_env`,无需重启会话。

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

references/privacy.md:38

Hidden file access

echo 'SCAN_WEBSERVICE_KEY=<your_api_key_here>' > ~/.yescan_env

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

references/privacy.md:60

Hidden file access

3. 如怀疑密钥泄露:在同一后台立即 *轮换* 或 *撤销* 旧密钥,并更新 `~/.yescan_env`

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

references/privacy.md:38

Generic API/secret keys

echo 'SCAN_WEBSERVICE_KEY=<your_api_key_here>' > ~/.yescan_env

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

references/privacy.md:45

Generic API/secret keys

'SCAN_WEBSERVICE_KEY=<your_api_key_here>' | Out-File -FilePath $HOME\.yescan_env -Encoding utf8

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

references/privacy.md:51

Generic API/secret keys

export SCAN_WEBSERVICE_KEY=<your_api_key_here>

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

references/troubleshooting.md:20

Hidden file in home directory

1. 确认 `~/.yescan_env` 中 `SCAN_WEBSERVICE_KEY` 不带引号、不带空格

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

references/troubleshooting.md:20

Hidden file access

1. 确认 `~/.yescan_env` 中 `SCAN_WEBSERVICE_KEY` 不带引号、不带空格

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

scripts/common/ocr_client.py:125

HTTP client library

response = self._send_request(param)

This call path sends the user-supplied image data or image URL to the Quark Scan King API. The outbound request is central to the skill and carries sensitive document content.

高

scripts/common/ocr_client.py:155

HTTP client library

response = self._send_request(param)

This call path sends the user-supplied image data or image URL to the Quark Scan King API. The outbound request is central to the skill and carries sensitive document content.

高

scripts/common/ocr_client.py:174

HTTP client library

response = self._send_request(param)

This call path sends the user-supplied image data or image URL to the Quark Scan King API. The outbound request is central to the skill and carries sensitive document content.

高

scripts/common/ocr_client.py:196

HTTP client library

def _send_request(self, param: Dict[str, Any]) -> requests.Response:

This call path sends the user-supplied image data or image URL to the Quark Scan King API. The outbound request is central to the skill and carries sensitive document content.

高

scripts/common/ocr_client.py:86

Python HTTP libraries

self.session = requests.Session()

The requests session and send method implement outbound calls to the Quark Scan King service. This creates third-party data transfer risk for user images.

高

scripts/common/ocr_client.py:196

Python HTTP libraries

def _send_request(self, param: Dict[str, Any]) -> requests.Response:

The requests session and send method implement outbound calls to the Quark Scan King service. This creates third-party data transfer risk for user images.

高

scripts/common/ocr_client.py:42

Hidden file in home directory

2. 用户 HOME 目录下的 ~/.yescan_env 文件(沙箱环境用,KEY=VALUE 文本格式)

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

scripts/common/ocr_client.py:60

Hidden file in home directory

"""从 ~/.yescan_env 读取 KEY=VALUE,缺失或异常返回空串"""

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

scripts/common/ocr_client.py:42

Hidden file access

2. 用户 HOME 目录下的 ~/.yescan_env 文件(沙箱环境用,KEY=VALUE 文本格式)

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

scripts/common/ocr_client.py:60

Hidden file access

"""从 ~/.yescan_env 读取 KEY=VALUE,缺失或异常返回空串"""

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

scripts/common/ocr_client.py:50

Generic API/secret keys

api_key = os.getenv("SCAN_WEBSERVICE_KEY", "").strip()

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

scripts/common/ocr_client.py:51

Generic API/secret keys

if api_key:

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

scripts/common/ocr_client.py:52

Generic API/secret keys

return api_key

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

scripts/common/ocr_client.py:53

Generic API/secret keys

api_key = CredentialManager._read_from_file("SCAN_WEBSERVICE_KEY")

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

scripts/common/ocr_client.py:54

Generic API/secret keys

if api_key:

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

scripts/common/ocr_client.py:55

Generic API/secret keys

return api_key

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

scripts/common/ocr_client.py:80

Generic API/secret keys

def __init__(self, api_key: str, scene: str, data_type: str, platform: str = None):

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

scripts/common/ocr_client.py:82

Generic API/secret keys

self.api_key = api_key

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

scripts/common/ocr_client.py:181

Generic API/secret keys

"aiApiKey": self.api_key,

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

scripts/common/runner.py:75

Generic API/secret keys

api_key = CredentialManager.load()

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

scripts/common/runner.py:77

Generic API/secret keys

api_key=api_key,

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

scripts/common/settings.py:18

Hardcoded URL

API_URL = "https://scan-business.quark.cn/vision"

This is the hard-coded outbound API endpoint used by the client. User image data and the API key are sent to this external service during conversion.

高

SECURITY.md:21

Hidden file in home directory

| API key stored in plaintext at `~/.yescan_env` | **disclosed**, standard practice | Recommend `chm

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

SECURITY.md:21

Hidden file access

| API key stored in plaintext at `~/.yescan_env` | **disclosed**, standard practice | Recommend `chm

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

SKILL.md:17

Hidden file in home directory

**配置 API 密钥**:将 `SCAN_WEBSERVICE_KEY=<your_api_key>` 写入 `~/.yescan_env`(每次执行自动读取,无需重启)。获取入口:访问 `http

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

SKILL.md:17

Hidden file access

**配置 API 密钥**:将 `SCAN_WEBSERVICE_KEY=<your_api_key>` 写入 `~/.yescan_env`(每次执行自动读取,无需重启)。获取入口:访问 `http

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

SKILL.md:17

Generic API/secret keys

**配置 API 密钥**:将 `SCAN_WEBSERVICE_KEY=<your_api_key>` 写入 `~/.yescan_env`(每次执行自动读取,无需重启)。获取入口:访问 `http

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

中

scripts/common/file_saver.py:9

Temp file creation

import tempfile

The tempfile module is used to place converted documents under the system temp directory. These files can persist after conversion and may hold sensitive content.

中

scripts/common/file_saver.py:51

Temp file creation

DEFAULT_SAVE_DIR = tempfile.gettempdir()

The tempfile module is used to place converted documents under the system temp directory. These files can persist after conversion and may hold sensitive content.

中

scripts/common/file_saver.py:207

Python file write/append

with open(filepath, 'wb') as f:

The code writes decoded API-returned content to disk. Although the path is generated by the skill, the saved document can contain sensitive or active Office/PDF content.

中

scripts/common/ocr_client.py:50

Python getenv function

api_key = os.getenv("SCAN_WEBSERVICE_KEY", "").strip()

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

中

scripts/common/ocr_client.py:50

getenv function call

api_key = os.getenv("SCAN_WEBSERVICE_KEY", "").strip()

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

リスク要因

🌐 ネットワークアクセス (17)

examples/excel-example.md:40 examples/pdf-example.md:40 examples/word-example.md:40 scripts/common/messages.py:3 scripts/common/messages.py:4 scripts/common/ocr_client.py:125 scripts/common/ocr_client.py:155 scripts/common/ocr_client.py:174 scripts/common/ocr_client.py:196 scripts/common/ocr_client.py:86 scripts/common/ocr_client.py:196 scripts/common/ocr_client.py:212 scripts/common/runner.py:46 scripts/common/settings.py:18 SKILL.md:9 SKILL.md:17 SKILL.md:110

📁 ファイルシステムへのアクセス (58)

🔑 環境変数 (21)

⚙️ 外部コマンド (28)

監査者: codex 監査履歴を表示 →

このレポートを共有・引用

バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。

バージョン別レポートを開く

レポートリンクをコピー

https://skillstore.io/skills/yescan-ai-yescan-transoffice-universal/audits/7?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdownバッジ

[![Skillstore security assessment](https://skillstore.io/badges/skills/yescan-ai-yescan-transoffice-universal/security.svg)](https://skillstore.io/skills/yescan-ai-yescan-transoffice-universal?utm_source=security_passport_badge)

HTMLバッジ

<a href="https://skillstore.io/skills/yescan-ai-yescan-transoffice-universal?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/yescan-ai-yescan-transoffice-universal/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

埋め込みカード

<iframe src="https://skillstore.io/embed/skills/yescan-ai-yescan-transoffice-universal.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学術引用 (APA · BibTeX · CFF)

APA形式の引用

yescan-ai. (2026). yescan-transoffice-universal security audit report (audit version 7) [Author version 1.1.4]. Skillstore. https://skillstore.io/skills/yescan-ai-yescan-transoffice-universal/audits/7

BibTeX形式の引用

@techreport{yescan-ai-yescan-ai-yescan-transoffice-universal-2026,
  author = {yescan-ai},
  title = {yescan-transoffice-universal security audit report (audit version 7)},
  institution = {Skillstore},
  year = {2026},
  number = {7},
  url = {https://skillstore.io/skills/yescan-ai-yescan-transoffice-universal/audits/7},
  note = {Author version 1.1.4}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "yescan-transoffice-universal security audit report (audit version 7)"
version: "1.1.4"
type: report
authors:
  - name: "yescan-ai"
date-released: "2026-07-08"
url: "https://skillstore.io/skills/yescan-ai-yescan-transoffice-universal/audits/7"
identifiers:
  - type: other
    value: "skillstore:yescan-ai-yescan-transoffice-universal:audit:7"
    description: "Skillstore immutable audit report identifier"

Skillstore スコア

このスコアの理由証拠の信頼度: 中

アーキテクチャ

100

保守性

コンテンツ

コミュニティ

100

仕様準拠

作成できるもの

レポートのスクリーンショットをスプレッドシートに変換

表や売上レポートのスクリーンショットを、編集可能なExcelファイルに変換します。

スキャンした契約書をWordファイルとして再構築

契約書の写真を、レビューおよび編集可能なWord文書に変換します。

紙のメモをPDFとしてアーカイブ

スキャンしたページや会議メモの画像を、共有および保存用のPDFに変換します。

これらのプロンプトを試す

ローカル画像を変換

この画像をWordに変換してください: /path/to/document.jpg

表のスクリーンショットを変換

この表のスクリーンショットをExcelに変換し、保存されたファイルパスを教えてください: /path/to/table.png

URLから変換

このURLの画像をPDFに変換してください: https://example.com/scan.png

最適な出力形式を選択

このスキャンには段落と小さな表が含まれています。最も編集しやすいOffice形式に変換してください: /path/to/scan.webp

ベストプラクティス

サードパーティサービスへ送信する前に、画像に機密データが含まれていないことを確認してください。
目的の出力形式に一致する固定シーンを使用してください。
不要になった一時出力ファイルは削除してください。

回避

文書変換を伴わない純粋なテキスト抽出には、このスキルを使用しないでください。
サードパーティ処理が承認されていない限り、個人情報を含む記録を処理しないでください。
未確認のシークレットや無関係なファイルを画像入力として渡さないでください。

よくある質問

このスキルはAPIキーなしで動作しますか？

いいえ。Quark Scan King開発者コンソールから取得したSCAN_WEBSERVICE_KEYが必要です。

変換済みファイルはどこに保存されますか？

変換済みファイルは、/tmpや%TEMP%などのシステム一時ディレクトリ配下に保存されます。

このスキルは画像を外部サービスへ送信しますか？

はい。ユーザーが提供した画像または画像URLをscan-business.quark.cnへ送信します。

一度に多数の画像を変換できますか？

いいえ。文書化されたワークフローでは、1コマンドにつき1つの画像を処理します。

どの形式がサポートされていますか？

一般的な画像入力をサポートし、Word、Excel、またはPDF出力を生成します。

これは画像補正に適したツールですか？

いいえ。このスキルは文書変換用であり、画像補正や純粋なOCRテキスト抽出用ではありません。

開発者情報

作成者

yescan-ai

ライセンス

MIT

作者バージョン

v1.1.4

Skillstore リビジョン

リポジトリ

https://github.com/yescan-ai/yescan-skill/tree/main/skills/yescan-transoffice-universal/

参照

64ca8af0f54a325752f08bd54e52151061ea659a

メンテナンスの新しさ

2026/7/20

利用状況

38 ダウンロード · 0 閲覧

ファイル構成

📁 examples/

📄 excel-example.md

📄 pdf-example.md

📄 word-example.md

📁 references/

📄 implementation.md

📄 privacy.md

📄 troubleshooting.md

📁 scripts/

📁 common/

📄 __init__.py

📄 constants.py

📄 file_saver.py

📄 messages.py

📄 ocr_client.py

📄 result_handlers.py

📄 runner.py

📄 scene_configs.py

📄 settings.py

📄 validators.py

📄 scan.py

📄 LICENSE

📄 README.md

📄 README.zh-CN.md

📄 SECURITY.md

📄 SKILL.md