Invoiced
v1.0.0Invoiced integration. Manage Organizations. Use when the user wants to interact with Invoiced data.
⭐ 0· 80·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with Invoiced and all runtime instructions use the Membrane CLI to discover, connect, and proxy requests to Invoiced — this matches the stated purpose. No unrelated credentials, binaries, or paths are requested.
Instruction Scope
SKILL.md instructs installing and using the Membrane CLI, creating connections, listing actions, running actions, and proxying to the Invoiced API. It does not instruct reading unrelated local files or asking for arbitrary secrets. Headless auth flow and browser-based login are documented.
Install Mechanism
The skill is instruction-only (no install spec), but instructs installing @membranehq/cli via npm (a public registry). This is reasonable for the described workflow, but installing global npm packages requires elevated permissions and trust in the package owner.
Credentials
No environment variables, credentials, or config paths are required by the skill. The SKILL.md explicitly advises letting Membrane manage API keys and not asking users for tokens, which is proportionate to the purpose.
Persistence & Privilege
The skill is not always-enabled and uses normal agent invocation. It does not request elevated persistent system privileges or modifications to other skills' configurations.
Assessment
This skill appears to do what it says: it requires you to install and log in to the Membrane CLI, which will manage Invoiced credentials and proxy API calls. Before installing: (1) verify you trust @membranehq/cli on the npm registry and review its README/source if possible; (2) expect a browser-based OAuth/login flow (or a headless URL/code exchange) that grants Membrane access to your Invoiced account; and (3) installing a global npm package requires appropriate permissions on your machine. If you prefer not to give a third-party service (Membrane) access to your Invoiced account, do not proceed.Like a lobster shell, security has layers — review code before you run it.
latestvk97arg90h76bpdm986bmmen17n83k1z7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.