Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed invoice-tracking workflow that reads configured invoice data, drafts reminders, and only sends payment emails after user approval.
Before installing, configure exactly which invoice source the skill may read, where digests may be delivered, and whether weekly scheduling is enabled. Do not grant email or accounting access unless you want the agent to draft and, after explicit approval, send reminders or update invoice records.
The skill invites broad use with wording like running weekly or whenever needed, but does not define a narrow invocation boundary or explicit preconditions. In an agent environment, this can cause accidental activation on loosely related finance requests and trigger reading sensitive invoice data or preparing customer-facing actions unexpectedly.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- **Third reminder (15-30 days overdue):** Firm. "Invoice #X is now [X] days past due. Please arrange payment at your earliest convenience."
- **Escalation (30+ days):** Serious. "This is a final notice regarding Invoice #X. If we don't receive payment by [date], we may need to discuss next steps."
Match the configured reminder style. Mark all as DRAFT — never send without approval.
### Step 4: Compile Invoice Digest
Format the digest:
The example trigger 'Check my invoices' is generic enough to overlap with normal conversational requests about invoices. In a multi-skill agent, this increases the chance of unintended routing into this skill, exposing financial data summaries or initiating reminder drafting without the user intending this exact workflow.
No suspicious patterns detected.