Invoice Generator

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may create or update local invoice files containing business, client, and payment information.

Why it was flagged

The skill directs the agent to create invoice files locally. This is purpose-aligned for an invoice generator and scoped to an invoices directory, but users should be aware of local file creation.

Skill content
Save invoices to an `invoices/` directory for record-keeping
Recommendation

Keep the invoices directory in a location you control, review generated files before sending them, and avoid overwriting or storing sensitive payment details unless needed.

What this means

Stored or reused invoice details could include client names, addresses, payment methods, invoice amounts, and business contact information.

Why it was flagged

The skill asks to retain reusable business information and later reuse prior details, which is useful for recurring invoices but creates persistent context containing business data.

Skill content
Your business info: Name, address, email, phone (save for reuse)
Recommendation

Confirm what information is being reused, update stale details before generating new invoices, and avoid including sensitive banking information unless you are comfortable storing it with the invoices.