Freelance Toolkit FR
v2.0.0Boîte à outils complète pour freelances en France gérant clients, suivi du temps, factures légales au format HTML et tableau de bord revenus.
⭐ 1· 1.6k·0 current·0 all-time
by@hugosbl
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name and runtime instructions (invoices, clients, time tracking, dashboard) align with the included Python scripts. The scripts operate on local files in ~/.freelance and require only Python 3 stdlib; there are no unrelated credentials, cloud APIs, or binaries requested.
Instruction Scope
SKILL.md instructs running the scripts in scripts/ and references only the ~/.freelance data directory. The code reads/writes config, clients, timetrack, and invoice metadata and opens generated HTML with the local web browser; there are no instructions to read other system files, exfiltrate data, or call external endpoints.
Install Mechanism
There is no install spec (no automatic download/install) which is low-risk. Minor inconsistency: SKILL.md describes an instruction-only skill using Python stdlib, but the package does include runnable Python scripts. This is not dangerous but you should be aware the code is present and would run if you execute the scripts.
Credentials
The skill requests no environment variables or external credentials. It stores sensitive user-provided data (name, email, phone, SIRET, IBAN, invoice history) under ~/.freelance — this is expected for an invoicing tool but is personal/financial data, so protect that directory accordingly.
Persistence & Privilege
The skill does not request always: true, does not modify other skills, and only persists data in its own directory (~/.freelance). It does not request elevated privileges or system-wide changes.
Assessment
This package appears to be a local, coherent freelance toolkit: it creates and uses ~/.freelance/ (config.json, clients.json, timetrack.json, and invoices/). Before installing or running: (1) review the included Python scripts if you want to verify behavior (they are present in the bundle); (2) be aware it will store personal/financial info (IBAN, email, SIRET) locally — keep that directory secure and back it up if needed; (3) the tool opens generated invoices in your default browser (no remote fetches in the template); (4) the source/author is unknown and SKILL.md lacks a published homepage — if provenance matters to you, try to obtain the upstream source or use in a sandbox first. Overall the package is internally consistent and matches its stated functionality.Like a lobster shell, security has layers — review code before you run it.
latestvk975z0r5mjjjcd1a8v426ftgas80c25p
License
MIT-0
Free to use, modify, and redistribute. No attribution required.