技能 yescan-transoffice-universal

📦

yescan-transoffice-universal

Name: yescan-transoffice-universal
Author: yescan-ai

v1.1.4 內容修訂 r1 高風險 🌐 網路存取📁 檔案系統存取🔑 環境變數⚙️ 外部命令

將掃描影像轉換為 Office 檔案

掃描影像通常需要使用者手動重新輸入後才能編輯。此技能透過 Quark Scan King 將一張圖片轉換為 Word、Excel 或 PDF。

支援: Claude Codex Code(CC)

⚠️ 38 差

Maintain this Skill? Claim it ⚠️ 38 差

安裝前請停止並請求確認。

請審查安裝計畫，並在變更檔案前取得使用者明確同意。

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求

Review the Skillstore skill "yescan-transoffice-universal" from https://skillstore.io/skills/yescan-ai-yescan-transoffice-universal.md and its manifest at https://skillstore.io/api/skills/yescan-ai-yescan-transoffice-universal/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/yescan-ai-yescan-transoffice-universal.md 已簽名 manifest GET /api/skills/yescan-ai-yescan-transoffice-universal/manifest 已簽名 lockfile GET /api/skills/yescan-ai-yescan-transoffice-universal/lockfile

測試它

正在使用「yescan-transoffice-universal」。使用者提供列印版會議議程的本機照片，並要求輸出為 Word。

預期結果:

此技能會回傳成功訊息，並提供以 .docx 結尾的本機文件路徑。

正在使用「yescan-transoffice-universal」。使用者提供財務表格截圖，並要求輸出為 Excel。

預期結果:

此技能會在暫存目錄中儲存 .xlsx 檔案，並回傳其路徑。

正在使用「yescan-transoffice-universal」。使用者提供圖片 URL，並要求取得 PDF 副本。

預期結果:

此技能會傳送圖片 URL 進行轉換，並回傳已儲存的 PDF 路徑。

安全審計

高風險

v7 • 2026/7/8 開啟版本化報告

Review confirmed expected but material risks: the skill uploads user images or file-derived base64 plus SCAN_WEBSERVICE_KEY to a hard-coded Quark endpoint, then saves returned documents under the system temp directory. Many static hits are documentation or syntax false positives, but real issues remain around third-party data transfer, plaintext key-file fallback, prompt instructions that can ignore prior context, and shell command templates using user-controlled placeholders.

已掃描檔案

1,803

分析行數

複核項目

已忽略的誤報

已確認的安全問題 (4)

高

scripts/common/ocr_client.py:45

Environment file access

# 沙箱凭证兜底文件:HOME 根目录下的 .yescan_env,与其它 .env-aware 工具隔离

The code defines a hidden home-directory config file for SCAN_WEBSERVICE_KEY. Reading credentials from a plaintext file is a real secret-management risk.

高

SKILL.md:21-29

Prompt Injection Attempt Detected

SKILL.md tells the agent it is forbidden to reference conversation history or inherit prior state. That instruction can conflict with higher-priority user or system context when the skill is invoked.

The text uses mandatory language that directs the agent to ignore prior conversation context. It is not a full system-message forgery, so confidence is high but not absolute.

高

SKILL.md:50-66

Unsafe Shell Command Construction Guidance

SKILL.md instructs the agent to replace command placeholders with user-provided URL, path, or base64 values and execute the command directly. If an agent builds this through a shell instead of argv-safe execution, user input can become a command-injection vector.

The command templates include user-controlled placeholders and the prose says to execute them directly. The risk depends on the calling agent shell behavior, so confidence is high but contextual.

中

references/implementation.md:43-47 scripts/common/result_handlers.py:105-116 scripts/common/file_saver.py:205-208

Server-Returned Documents Saved Without Content Validation

The implementation saves FileBase64 returned by the external service as Word, Excel, or PDF based on the selected scene. The documentation states that document magic-byte validation is not performed, so active or malformed documents may be written locally.

The code path directly decodes and writes service-returned base64, and the documentation explicitly says document magic-byte validation is not done. This is a clear content-handling risk, not merely a scanner pattern.

能力複核項目 (59)

這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。

高

README.md:27

Hidden file in home directory

echo 'SCAN_WEBSERVICE_KEY=<your_api_key>' > ~/.yescan_env

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

README.md:30

Hidden file in home directory

> The environment variable takes priority; if not set, the key is loaded from `~/.yescan_env`.

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

README.md:59

Hidden file in home directory

- `SCAN_WEBSERVICE_KEY` environment variable (or `~/.yescan_env`)

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

README.md:27

Hidden file access

echo 'SCAN_WEBSERVICE_KEY=<your_api_key>' > ~/.yescan_env

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

README.md:30

Hidden file access

> The environment variable takes priority; if not set, the key is loaded from `~/.yescan_env`.

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

README.md:59

Hidden file access

- `SCAN_WEBSERVICE_KEY` environment variable (or `~/.yescan_env`)

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

README.md:23

Generic API/secret keys

export SCAN_WEBSERVICE_KEY=<your_api_key>

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

README.md:27

Generic API/secret keys

echo 'SCAN_WEBSERVICE_KEY=<your_api_key>' > ~/.yescan_env

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

README.zh-CN.md:27

Hidden file in home directory

echo 'SCAN_WEBSERVICE_KEY=<你的密钥>' > ~/.yescan_env

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

README.zh-CN.md:30

Hidden file in home directory

> 优先读取环境变量,未设置时自动从 `~/.yescan_env` 文件加载。

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

README.zh-CN.md:59

Hidden file in home directory

- 配置 `SCAN_WEBSERVICE_KEY` 环境变量(或 `~/.yescan_env`)

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

README.zh-CN.md:27

Hidden file access

echo 'SCAN_WEBSERVICE_KEY=<你的密钥>' > ~/.yescan_env

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

README.zh-CN.md:30

Hidden file access

> 优先读取环境变量,未设置时自动从 `~/.yescan_env` 文件加载。

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

README.zh-CN.md:59

Hidden file access

- 配置 `SCAN_WEBSERVICE_KEY` 环境变量(或 `~/.yescan_env`)

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

references/privacy.md:31

Hidden file in home directory

### 3.1 推荐方式:写入 `~/.yescan_env`(永久生效)

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

references/privacy.md:33

Hidden file in home directory

技能每次执行会读取 `~/.yescan_env`,无需重启会话。

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

references/privacy.md:38

Hidden file in home directory

echo 'SCAN_WEBSERVICE_KEY=<your_api_key_here>' > ~/.yescan_env

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

references/privacy.md:60

Hidden file in home directory

3. 如怀疑密钥泄露:在同一后台立即 *轮换* 或 *撤销* 旧密钥,并更新 `~/.yescan_env`

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

references/privacy.md:31

Hidden file access

### 3.1 推荐方式:写入 `~/.yescan_env`(永久生效)

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

references/privacy.md:33

Hidden file access

技能每次执行会读取 `~/.yescan_env`,无需重启会话。

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

references/privacy.md:38

Hidden file access

echo 'SCAN_WEBSERVICE_KEY=<your_api_key_here>' > ~/.yescan_env

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

references/privacy.md:60

Hidden file access

3. 如怀疑密钥泄露:在同一后台立即 *轮换* 或 *撤销* 旧密钥,并更新 `~/.yescan_env`

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

references/privacy.md:38

Generic API/secret keys

echo 'SCAN_WEBSERVICE_KEY=<your_api_key_here>' > ~/.yescan_env

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

references/privacy.md:45

Generic API/secret keys

'SCAN_WEBSERVICE_KEY=<your_api_key_here>' | Out-File -FilePath $HOME\.yescan_env -Encoding utf8

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

references/privacy.md:51

Generic API/secret keys

export SCAN_WEBSERVICE_KEY=<your_api_key_here>

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

references/troubleshooting.md:20

Hidden file in home directory

1. 确认 `~/.yescan_env` 中 `SCAN_WEBSERVICE_KEY` 不带引号、不带空格

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

references/troubleshooting.md:20

Hidden file access

1. 确认 `~/.yescan_env` 中 `SCAN_WEBSERVICE_KEY` 不带引号、不带空格

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

scripts/common/ocr_client.py:125

HTTP client library

response = self._send_request(param)

This call path sends the user-supplied image data or image URL to the Quark Scan King API. The outbound request is central to the skill and carries sensitive document content.

高

scripts/common/ocr_client.py:155

HTTP client library

response = self._send_request(param)

This call path sends the user-supplied image data or image URL to the Quark Scan King API. The outbound request is central to the skill and carries sensitive document content.

高

scripts/common/ocr_client.py:174

HTTP client library

response = self._send_request(param)

This call path sends the user-supplied image data or image URL to the Quark Scan King API. The outbound request is central to the skill and carries sensitive document content.

高

scripts/common/ocr_client.py:196

HTTP client library

def _send_request(self, param: Dict[str, Any]) -> requests.Response:

This call path sends the user-supplied image data or image URL to the Quark Scan King API. The outbound request is central to the skill and carries sensitive document content.

高

scripts/common/ocr_client.py:86

Python HTTP libraries

self.session = requests.Session()

The requests session and send method implement outbound calls to the Quark Scan King service. This creates third-party data transfer risk for user images.

高

scripts/common/ocr_client.py:196

Python HTTP libraries

def _send_request(self, param: Dict[str, Any]) -> requests.Response:

The requests session and send method implement outbound calls to the Quark Scan King service. This creates third-party data transfer risk for user images.

高

scripts/common/ocr_client.py:42

Hidden file in home directory

2. 用户 HOME 目录下的 ~/.yescan_env 文件(沙箱环境用,KEY=VALUE 文本格式)

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

scripts/common/ocr_client.py:60

Hidden file in home directory

"""从 ~/.yescan_env 读取 KEY=VALUE,缺失或异常返回空串"""

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

scripts/common/ocr_client.py:42

Hidden file access

2. 用户 HOME 目录下的 ~/.yescan_env 文件(沙箱环境用,KEY=VALUE 文本格式)

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

scripts/common/ocr_client.py:60

Hidden file access

"""从 ~/.yescan_env 读取 KEY=VALUE,缺失或异常返回空串"""

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

scripts/common/ocr_client.py:50

Generic API/secret keys

api_key = os.getenv("SCAN_WEBSERVICE_KEY", "").strip()

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

scripts/common/ocr_client.py:51

Generic API/secret keys

if api_key:

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

scripts/common/ocr_client.py:52

Generic API/secret keys

return api_key

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

scripts/common/ocr_client.py:53

Generic API/secret keys

api_key = CredentialManager._read_from_file("SCAN_WEBSERVICE_KEY")

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

scripts/common/ocr_client.py:54

Generic API/secret keys

if api_key:

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

scripts/common/ocr_client.py:55

Generic API/secret keys

return api_key

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

scripts/common/ocr_client.py:80

Generic API/secret keys

def __init__(self, api_key: str, scene: str, data_type: str, platform: str = None):

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

scripts/common/ocr_client.py:82

Generic API/secret keys

self.api_key = api_key

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

scripts/common/ocr_client.py:181

Generic API/secret keys

"aiApiKey": self.api_key,

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

scripts/common/runner.py:75

Generic API/secret keys

api_key = CredentialManager.load()

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

scripts/common/runner.py:77

Generic API/secret keys

api_key=api_key,

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

高

scripts/common/settings.py:18

Hardcoded URL

API_URL = "https://scan-business.quark.cn/vision"

This is the hard-coded outbound API endpoint used by the client. User image data and the API key are sent to this external service during conversion.

高

SECURITY.md:21

Hidden file in home directory

| API key stored in plaintext at `~/.yescan_env` | **disclosed**, standard practice | Recommend `chm

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

SECURITY.md:21

Hidden file access

| API key stored in plaintext at `~/.yescan_env` | **disclosed**, standard practice | Recommend `chm

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

SKILL.md:17

Hidden file in home directory

**配置 API 密钥**:将 `SCAN_WEBSERVICE_KEY=<your_api_key>` 写入 `~/.yescan_env`(每次执行自动读取,无需重启)。获取入口:访问 `http

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

SKILL.md:17

Hidden file access

**配置 API 密钥**:将 `SCAN_WEBSERVICE_KEY=<your_api_key>` 写入 `~/.yescan_env`(每次执行自动读取,无需重启)。获取入口:访问 `http

The skill uses ~/.yescan_env as a plaintext API-key fallback. Storing and reading a secret from a hidden home-directory file is a real credential exposure risk.

高

SKILL.md:17

Generic API/secret keys

**配置 API 密钥**:将 `SCAN_WEBSERVICE_KEY=<your_api_key>` 写入 `~/.yescan_env`(每次执行自动读取,无需重启)。获取入口:访问 `http

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

中

scripts/common/file_saver.py:9

Temp file creation

import tempfile

The tempfile module is used to place converted documents under the system temp directory. These files can persist after conversion and may hold sensitive content.

中

scripts/common/file_saver.py:51

Temp file creation

DEFAULT_SAVE_DIR = tempfile.gettempdir()

The tempfile module is used to place converted documents under the system temp directory. These files can persist after conversion and may hold sensitive content.

中

scripts/common/file_saver.py:207

Python file write/append

with open(filepath, 'wb') as f:

The code writes decoded API-returned content to disk. Although the path is generated by the skill, the saved document can contain sensitive or active Office/PDF content.

中

scripts/common/ocr_client.py:50

Python getenv function

api_key = os.getenv("SCAN_WEBSERVICE_KEY", "").strip()

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

中

scripts/common/ocr_client.py:50

getenv function call

api_key = os.getenv("SCAN_WEBSERVICE_KEY", "").strip()

The skill requires SCAN_WEBSERVICE_KEY and loads or passes it for the external API request. This is expected functionality, but it handles a sensitive credential.

風險因素

🌐 網路存取 (17)

examples/excel-example.md:40 examples/pdf-example.md:40 examples/word-example.md:40 scripts/common/messages.py:3 scripts/common/messages.py:4 scripts/common/ocr_client.py:125 scripts/common/ocr_client.py:155 scripts/common/ocr_client.py:174 scripts/common/ocr_client.py:196 scripts/common/ocr_client.py:86 scripts/common/ocr_client.py:196 scripts/common/ocr_client.py:212 scripts/common/runner.py:46 scripts/common/settings.py:18 SKILL.md:9 SKILL.md:17 SKILL.md:110

📁 檔案系統存取 (58)

🔑 環境變數 (21)

⚙️ 外部命令 (28)

審計單位: codex 檢視審計紀錄 →

分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告

複製報告連結

https://skillstore.io/skills/yescan-ai-yescan-transoffice-universal/audits/7?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/yescan-ai-yescan-transoffice-universal/security.svg)](https://skillstore.io/skills/yescan-ai-yescan-transoffice-universal?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/yescan-ai-yescan-transoffice-universal?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/yescan-ai-yescan-transoffice-universal/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/yescan-ai-yescan-transoffice-universal.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

學術引用 (APA · BibTeX · CFF)

APA 引用

yescan-ai. (2026). yescan-transoffice-universal security audit report (audit version 7) [Author version 1.1.4]. Skillstore. https://skillstore.io/skills/yescan-ai-yescan-transoffice-universal/audits/7

BibTeX 引用

@techreport{yescan-ai-yescan-ai-yescan-transoffice-universal-2026,
  author = {yescan-ai},
  title = {yescan-transoffice-universal security audit report (audit version 7)},
  institution = {Skillstore},
  year = {2026},
  number = {7},
  url = {https://skillstore.io/skills/yescan-ai-yescan-transoffice-universal/audits/7},
  note = {Author version 1.1.4}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "yescan-transoffice-universal security audit report (audit version 7)"
version: "1.1.4"
type: report
authors:
  - name: "yescan-ai"
date-released: "2026-07-08"
url: "https://skillstore.io/skills/yescan-ai-yescan-transoffice-universal/audits/7"
identifiers:
  - type: other
    value: "skillstore:yescan-ai-yescan-transoffice-universal:audit:7"
    description: "Skillstore immutable audit report identifier"

Skillstore 評分

評分依據證據置信度: 中

架構

100

可維護性

內容

社群

100

規範符合度

你可以打造什麼

將報表截圖轉成試算表

將表格或銷售報表截圖轉換為可編輯的 Excel 檔案。

將掃描合約重建為 Word 檔案

將合約照片轉換為可審閱與編輯的 Word 文件。

將紙本筆記封存為 PDF

將掃描頁面或會議筆記圖片轉換為 PDF，方便分享與儲存。

試試這些提示

轉換本機圖片

Convert this image to Word: /path/to/document.jpg

轉換表格截圖

Convert this table screenshot to Excel and give me the saved file path: /path/to/table.png

從 URL 轉換

Convert the image at this URL to PDF: https://example.com/scan.png

選擇最佳輸出格式

This scan contains paragraphs and a small table. Convert it to the most editable Office format: /path/to/scan.webp

最佳實務

將圖片傳送至第三方服務前，先確認其中不含敏感資料。
使用符合所需輸出格式的固定場景。
暫存輸出檔案不再需要後，請將其刪除。

避免

請勿將此技能用於不含文件轉換的純文字擷取。
除非已核准第三方處理，否則請勿處理私人紀錄。
請勿將未驗證的秘密資訊或無關檔案作為圖片輸入傳入。

常見問題

這個技能可以在沒有 API 金鑰的情況下運作嗎？

不行。它需要來自 Quark Scan King 開發者主控台的 SCAN_WEBSERVICE_KEY。

轉換後的檔案會儲存在哪裡？

轉換後的檔案會儲存在系統暫存目錄下，例如 /tmp 或 %TEMP%。

此技能會將圖片傳送到外部服務嗎？

會。它會將使用者提供的圖片或圖片 URL 傳送至 scan-business.quark.cn。

它可以一次轉換多張圖片嗎？

不行。文件記載的工作流程是每個命令處理一張圖片。

支援哪些格式？

它支援常見圖片輸入，並產生 Word、Excel 或 PDF 輸出。

這是適合圖片增強的工具嗎？

不是。此技能用於文件轉換，不是用於圖片增強或純 OCR 文字擷取。

開發者詳細資訊

作者

yescan-ai

授權

MIT

作者版本

v1.1.4

Skillstore 修訂

儲存庫

https://github.com/yescan-ai/yescan-skill/tree/main/skills/yescan-transoffice-universal/

引用

64ca8af0f54a325752f08bd54e52151061ea659a

維護新鮮度

2026/7/21

使用量

38 次下載 · 0 次瀏覽

檔案結構

📁 examples/

📄 excel-example.md

📄 pdf-example.md

📄 word-example.md

📁 references/

📄 implementation.md

📄 privacy.md

📄 troubleshooting.md

📁 scripts/

📁 common/

📄 __init__.py

📄 constants.py

📄 file_saver.py

📄 messages.py

📄 ocr_client.py

📄 result_handlers.py

📄 runner.py

📄 scene_configs.py

📄 settings.py

📄 validators.py

📄 scan.py

📄 LICENSE

📄 README.md

📄 README.zh-CN.md

📄 SECURITY.md

📄 SKILL.md