wlzh-invoice-scanner

SUSPICIOUS. The skill’s overall purpose and capabilities mostly align with invoice scanning and report generation, and there are no remote installs, credential requests, or off-device data flows. However, it performs broad destructive filesystem actions—deleting original ZIPs and recursively removing files in user-selected directories—which is higher-impact than necessary for a scanning/report skill and creates meaningful local data-loss risk.