Facture Make

• Analyzed: May 15, 2026, 3:53 AM
• Findings: 1
• Version: 1.0.5
• Hash: 7c11714a972631d7e1b19eb469a8aaa69f65e74758a3a8de9ea28a83ad5ea152
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as benign. Its purpose is to generate and send invoice data to a Make.com webhook, which is clearly stated in the `SKILL.md` instructions. The `SKILL.md` explicitly instructs the AI agent to pass 'uniquement l'objet JSON contenu dans la clé `invoice`' to `send_invoice.py`, which is a strong security control against prompt injection. The `send_invoice.py` script further reinforces this by defensively extracting the 'invoice' key from its input and sends the data to a hardcoded, legitimate Make.com URL, preventing arbitrary data exfiltration or external calls. No evidence of malicious intent, sensitive data theft, command injection, or persistence mechanisms was found.