📦
taiwan-stock
77Check Taiwan Stock Closing Prices
Taiwan market data uses different endpoints, date formats, and update schedules. This skill guides closing-price queries and percentage rankings using public TWSE and TPEX APIs.
데이터 및 분석 보기
스킬 invoice-winning-numbers
📦
invoice-winning-numbers
콘텐츠 리비전 r1 중간 위험 ⚙️ 외부 명령어🌐 네트워크 접근📁 파일 시스템 접근
Check Taiwan Invoice Winning Numbers
Checking Taiwan invoices manually can miss prize matches or use the wrong draw period. This skill guides official-source lookups, batch comparisons, and cloud prize verification.
지원: Claude Codex Code(CC)
내 에이전트로 설치
이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.
에이전트 요청
Review the Skillstore skill "invoice-winning-numbers" from https://skillstore.io/skills/tahodev-invoice-winning-numbers.md and its manifest at https://skillstore.io/api/skills/tahodev-invoice-winning-numbers/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.
에이전트가 읽기 쉬운 리소스
AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.
테스트해 보기
"invoice-winning-numbers" 사용 중입니다. Show the skill's historical example for the July-August 2026 draw.
예상 결과:
- Historical illustration from SKILL.md, not a live lookup: period 115 year, July-August.
- Special prize: 38548029. Grand prize: 10138845.
- First prizes: 24121106, 28589937, and 83663333. No additional sixth prize appears in this example.
- Estimated claim window: October 6, 2026, through January 5, 2027. Confirm with the official platform.
- Source to verify: https://invoice.etax.nat.gov.tw/lastNumber.html.
"invoice-winning-numbers" 사용 중입니다. Using the documented May-June 2026 first-prize number 07225810, compare invoices 07225810 and 99999810.
예상 결과:
- Illustrative comparison only, not a live result or eligibility confirmation.
- Invoice 07225810: first prize, NT$200,000, based on the documented complete match.
- Invoice 99999810: sixth prize, NT$200, based on the documented three-digit suffix 810.
- Verify both invoices belong to this issue period before claiming. Source to verify: https://invoice.etax.nat.gov.tw/lastNumber.html.
보안 감사
중간 위험v1 • 2026. 10. 13. 버전별 보고서 열기
The 19 backtick alerts, eight URL alerts, and two entropy alerts are false positives involving Markdown, official public sources, and readable multilingual text. Seven temporary-file alerts identify predictable shared paths that permit local tampering or symlink-based overwrites. Automatic rechecking also lacks explicit consent and can misuse carrier suffixes or reuse invoice numbers across periods; no credential exfiltration evidence was found.
1
스캔된 파일
158
분석된 줄 수
7
검토 항목
0
오탐 무시됨
확인된 보안 우려 사항 (2)
중간
Recurring Actions Without Explicit Consent
Line 144 says the agent may schedule rechecking itself ('代理可自行排定') after receiving invoice numbers or carrier suffixes. This expands a prior lookup into recurring processing without explicit scheduling or retention consent.
Both the Chinese workflow and English summary authorize proactive rechecking of saved identifiers. No explicit opt-in, retention limit, or cancellation requirement appears.
중간
Invalid Inputs and Period Reuse in Automatic Matching
Line 144 allows fixed invoice numbers or carrier suffixes to trigger rechecking every draw. Carrier suffixes cannot identify invoices, and reusing invoice numbers across periods can report invalid wins.
The matching instructions require complete eight-digit numbers or ten-character cloud serials. Automatic guidance nevertheless accepts carrier suffixes and omits invoice issue-period checks.
기능 검토 항목 (7)
이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.
중간
Temp directory access
curl -sm 30 https://invoice.etax.nat.gov.tw/lastNumber.html -o /tmp/lastNumber.html
curl writes to a predictable shared temporary filename without private-directory isolation. A local attacker can pre-create a symlink to overwrite another agent-writable file.
중간
Temp directory access
h = open('/tmp/lastNumber.html', encoding='utf-8').read()
The parser trusts a predictable shared temporary file without ownership or isolation checks. Another local user can replace its contents and falsify prize results.
중간
Temp directory access
h = open('/tmp/lastNumber.html', encoding='utf-8').read()
Batch matching reads the same predictable shared file without establishing trusted provenance. Local file replacement can produce false winning or losing results.
중간
Temp directory access
curl -sm 30 https://invoice.etax.nat.gov.tw/cloudNowNumber.html -o /tmp/cloud.html
curl writes the cloud-prize page to a predictable shared filename. A pre-created symlink can redirect the write to another agent-writable file.
중간
Temp directory access
grep -oE 'pdf/[^"]+\.pdf' /tmp/cloud.html | sort -u
PDF link extraction trusts a predictable shared file that another local user can replace. Tampering can substitute prize-document paths and compromise subsequent matching.
중간
Temp directory access
curl -sm 30 'https://invoice.etax.nat.gov.tw/pdf/<檔名>.pdf' -o /tmp/prize.pdf
The PDF download writes to a fixed shared temporary path. A pre-created symlink can overwrite an unrelated file writable by the agent.
중간
Temp directory access
pdftotext /tmp/prize.pdf /tmp/prize.txt
pdftotext reads a predictable PDF path and writes a predictable text path. Local replacement can tamper with inputs, while output symlinks can redirect writes.
위험 요인
⚙️ 외부 명령어 (19)
🌐 네트워크 접근 (8)
📁 파일 시스템 접근 (7)
감사자: codex
이 보고서 공유 및 인용
버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.
보고서 링크 복사
https://skillstore.io/skills/tahodev-invoice-winning-numbers/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 배지
[](https://skillstore.io/skills/tahodev-invoice-winning-numbers?utm_source=security_passport_badge)HTML 배지
<a href="https://skillstore.io/skills/tahodev-invoice-winning-numbers?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tahodev-invoice-winning-numbers/security.svg" alt="Skillstore security assessment" loading="lazy"></a>임베드 카드
<iframe src="https://skillstore.io/embed/skills/tahodev-invoice-winning-numbers.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>학술 인용 (APA · BibTeX · CFF)
APA 인용
tahodev. (2026). invoice-winning-numbers security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/tahodev-invoice-winning-numbers/audits/1BibTeX 인용
@techreport{tahodev-tahodev-invoice-winning-numbers-2026,
author = {tahodev},
title = {invoice-winning-numbers security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/tahodev-invoice-winning-numbers/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "invoice-winning-numbers security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "tahodev"
date-released: "2026-10-13"
url: "https://skillstore.io/skills/tahodev-invoice-winning-numbers/audits/1"
identifiers:
- type: other
value: "skillstore:tahodev-invoice-winning-numbers:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 점수
이 점수의 이유 증거 신뢰도: 중간 55
아키텍처
85
유지보수성
87
콘텐츠
65
커뮤니티
83
사양 준수
만들 수 있는 것
Check Household Receipts
Compare several receipts from one draw period and report each highest matching prize.
Verify Cloud Invoice Prizes
Check complete cloud invoice serials against official PDF lists and confirm the prize category from each document header.
Review Historical Draw Sources
Locate official historical draw references and distinguish downloadable cloud prize lists from regular draws needing manual confirmation.
이 프롬프트를 사용해 보세요
Find the Latest Draw
Find the latest Taiwan invoice winning numbers. Include the draw period, official source, and claim window. Mark any estimated deadline.
Check Several Invoices
Check [eight-digit invoice numbers] for [issue period]. Preserve leading zeros. Report each highest prize and verify the draw period before comparing.
Verify a Cloud Invoice
Check cloud invoice [two-letter prefix and eight digits] for [issue period]. Use official PDF lists and confirm full-serial matches and prize headers.
Plan an Approved Recheck
Plan one recheck for [invoice numbers and issue period] after its draw. Ask before scheduling or retaining identifiers, and specify expiry and cancellation.
모범 사례
- Preserve leading zeros and verify each invoice's issue period before matching.
- Use fresh official sources and confirm claim deadlines and cloud prize document headers.
- Use private temporary storage and obtain explicit approval before retaining identifiers or scheduling recurring checks.
피하기
- Treating historical examples, cached pages, or estimated deadlines as current official results.
- Matching carrier suffixes or partial cloud serials as though they were complete invoice identifiers.
- Rechecking saved numbers across unrelated periods or creating recurring tasks without explicit permission.
자주 묻는 질문
Do I need an API key or login?
No. The documented workflow downloads public official pages and prize PDFs without credentials.
Can I check several invoices together?
Yes. The skill includes batch comparison guidance and reports the highest matching prize for each invoice.
What is needed for cloud invoice prizes?
Provide the full two-letter prefix and eight digits. Cloud prizes require exact serial matches and eligibility confirmation.
Can it retrieve historical winning numbers?
Historical cloud prize lists are downloadable. Historical regular draws require manual confirmation through official tax-portal links.
Does it automatically schedule future checks?
No scheduler is included. Scheduled checks require external tooling, explicit approval, identifier retention limits, and correct issue-period matching.
What happens if a page cannot be parsed?
The instructions require stopping and directing you to the official site. The skill should not invent results or present stale data.
개발자 세부 정보
작성자
tahodev라이선스
MIT
Skillstore 리비전
r1
버전 안내
작성자가 버전을 선언하지 않았습니다.
참조
2aab20a3878daa05021884e089a7dd7739e08581
유지보수 최신성
2026. 10. 13.
사용량
0 다운로드 · 0 조회
파일 구조
📄 SKILL.md
tahodev의 다른 스킬
전체 보기📦
taiwan-real-estate
77Analyze Taiwan Property Transaction Records
Taiwan property records require careful handling of quarterly files, date formats, and price units. This skill guides government CSV downloads and contextual transaction reporting.
데이터 및 분석 보기
📦
taiwan-produce
77Check Taiwan Wholesale Produce Prices
Taiwan produce prices vary by market and trading date, making comparisons difficult. This skill guides CSV retrieval and filtering to report wholesale prices and volumes.
데이터 및 분석 보기
📦
taiwan-postage
77Look Up Taiwan Postage Rates
Postage costs vary by mail type, weight, destination, and service. This skill guides your assistant through official Chunghwa Post tables to report applicable rates and query dates.
생산성 보기
📦
taiwan-parking
77Find Available Parking in Taipei
Drivers need current parking availability and clear lot details before choosing a destination. This skill joins public Taipei feeds to report spaces, addresses, pricing, and update times.
생산성 보기
📦
taiwan-lunar-cal
77Convert Taiwan Lunar Dates and Estimate Solar Terms
Lunar dates, leap months, and solar terms can be difficult to determine from Gregorian dates. This skill provides local Python calculations for lunar conversion, zodiac animals, and Taiwan solar-term estimates.
생산성 보기
관련 스킬
전체 보기📦
task-state-ledger
90Track Long Tasks With a Portable State Ledger
작성자 glenskii
Long technical tasks lose decisions, evidence, and next actions across sessions. This skill maintains a concise Markdown state file with reviewed local evidence references.
생산성 보기
📦
gpt-series-reasoning-style
90Verify AI Deliverables with Evidence
작성자 jadeyingwah
AI work can appear complete before the result is opened, tested, or checked against the request. This skill adds staged planning, real-environment verification, and honest completion levels.
생산성 보기
📦
tool-discovery
87모든 작업에 적합한 AI 도구 선택
작성자 0xDarkMatter
수많은 스킬과 에이전트 중에서 선택하느라 기술 작업이 지연될 수 있습니다. 이 스킬은 간결한 카탈로그와 선택 규칙을 사용하여 각 작업에 특화된 도구를 연결합니다.
생산성 보기
📦
dbs-human-dispatch
87Delegate Tasks and Verify Team Deliverables
작성자 dontbesilent2025
Unclear assignments and scattered feedback make team delivery difficult to verify. This skill creates task briefs, coordinates authorized follow-up, and checks deliverables against agreed criteria.
생산성 보기
📦
prompt-engineering-patterns
86프로덕션 LLM 프롬프트 최적화
작성자 wshobson
LLM 프롬프트는 지침, 예시, 평가 기준이 명확하지 않아 실패하는 경우가 많습니다. 이 스킬은 Claude, Codex, Claude Code 및 유사 도구에서 프롬프트를 개선하기 위한 템플릿과 워크플로를 제공합니다.
생산성 보기
📦
organizing-with-labels
86라벨로 GitHub Issues 정리하기
작성자 C0ntr0lledCha0s
대규모 리포지토리는 이슈에 일관성 없는 라벨과 불명확한 마일스톤이 사용될 때 시간을 낭비합니다. 이 스킬은 GitHub 워크플로를 통해 분류 체계를 만들고, 일괄 업데이트를 실행하며, 진행 상황을 보고하도록 돕습니다.
생산성 보기