Akaunting

Interact with Akaunting open-source accounting software via REST API. Use for creating invoices, tracking income/expenses, managing accounts, and bookkeeping automation. Triggers on accounting, bookkeeping, invoicing, expenses, income tracking, or Akaunting mentions.

Security Scan

The skill generally matches its stated purpose (Akaunting API/CLI) but contains inconsistencies and privileged operations (docker/container file edits) that are not declared in the metadata and deserve caution.

Purpose & Capability

The skill claims to let an agent interact with Akaunting via its API and includes a CLI and a docker-compose to run Akaunting locally — that fits the purpose. However, the metadata lists no required binaries or environment variables even though the runtime docs and scripts assume docker, docker compose, python3, and the ability to run docker exec. The included docker-compose also embeds DB and admin passwords (insecure defaults). The lack of declared runtime requirements is an incoherence.

Instruction Scope

SKILL.md and scripts instruct the user/agent to deploy a local Akaunting container, create a plaintext config file (~/.config/akaunting/config.json) with email/password, and run a fix script that executes docker exec to modify /var/www/html/app/Providers/Event.php inside the running container and run php commands in-container. Those actions are within the stated domain (fixing a Laravel listener, enabling payments, calling the API) but they require privileged access to Docker and modify files inside the application container — an operation with side effects that isn't called out in the skill metadata.

Install Mechanism

There is no automated install spec (instruction-only install), so nothing is automatically downloaded by the skill package itself. The provided docker-compose references official Docker Hub images (akaunting/akaunting:latest and mariadb:10.6), which is expected for running the app. Note: pulling latest images will fetch remote code at runtime and the compose file contains default secrets.

Credentials

The skill metadata declares no required environment variables or primary credential, but the docs and CLI script expect AKAUNTING_URL, AKAUNTING_EMAIL, AKAUNTING_PASSWORD or a config file at ~/.config/akaunting/config.json. This mismatch (undisclosed credential requirements) is a red flag. Additionally, the provided docker-compose includes hard-coded DB and ADMIN credentials (e.g., ADMIN_PASSWORD=changeme123, MYSQL_ROOT_PASSWORD=root_secure_password) which are insecure defaults and could be overlooked by users.

Persistence & Privilege

The skill is not marked always:true and does not attempt to modify other skills or agent configuration. The most significant privilege requirement is access to the host's Docker daemon (to run docker exec and manage containers), which is not expressed in metadata but is required by the provided fix script.

What to consider before installing

Before installing or running this skill, understand that: - It expects you to run Akaunting locally using Docker/docker-compose and to have python3 and Docker access on the host; those runtime requirements are not declared in the skill metadata. - The included fix script will run docker exec and modify files inside the Akaunting container (it writes to /var/www/html/app/Providers/Event.php and runs php commands in-container). That requires access to the Docker daemon and will change application code — run only on an isolated test system or a VM, not on a production host. - The docker-compose in the repo embeds default/weak credentials (DB and admin passwords). If you deploy it, change these secrets and secure the instance before adding real data. - The CLI stores API credentials in plaintext at ~/.config/akaunting/config.json by default; consider using a protected environment or vault for sensitive credentials. - The metadata should declare required binaries and env vars (docker, docker-compose, python3, AKAUNTING_*). The absence of these declarations is an inconsistency — ask the skill author to correct the metadata and to document security implications. Recommended actions: review the scripts locally, run the stack in an isolated sandbox, rotate/change any default passwords in the compose file, and only provide real account credentials after you are confident about the environment and origin of this skill.

Akaunting Skill

CLI and API integration for Akaunting, a free open-source accounting platform.

Quick Start

# Test connection
akaunting ping

# List data
akaunting accounts
akaunting categories  
akaunting transactions

# Create transactions
akaunting income --amount 100 --category Sales --description "Payment received"
akaunting expense --amount 50 --category Other --description "Office supplies"

Setup

1. Deploy Akaunting

# Use the provided docker-compose
cp skills/akaunting/assets/docker-compose.yml ~/akaunting/
cd ~/akaunting && docker compose up -d

Access web UI at http://YOUR_IP:8080 and complete the setup wizard.

2. Apply Required Fix

Critical: Akaunting has a bug where module event listeners don't auto-register. Run:

python3 skills/akaunting/scripts/fix_event_listener.py

Or manually add to /var/www/html/app/Providers/Event.php in the $listen array:

'App\Events\Module\PaymentMethodShowing' => [
    'Modules\OfflinePayments\Listeners\ShowAsPaymentMethod',
],

3. Configure Credentials

mkdir -p ~/.config/akaunting
cat > ~/.config/akaunting/config.json << EOF
{
  "url": "http://YOUR_IP:8080",
  "email": "[e-mail]",
  "password": "your-password"
}
EOF

Or set environment variables: AKAUNTING_URL, AKAUNTING_EMAIL, AKAUNTING_PASSWORD

CLI Commands

Command	Description
akaunting ping	Test API connection
akaunting accounts	List bank accounts
akaunting categories [--type income|expense]	List categories
akaunting transactions [--type income|expense]	List transactions
akaunting items	List products/services
akaunting income --amount X --category Y	Create income
akaunting expense --amount X --category Y	Create expense
akaunting item --name X --price Y	Create item

Add --json to any command for JSON output.

API Reference

See references/api.md for full endpoint documentation.

Key Endpoints

• GET /api/ping - Health check
• GET/POST /api/accounts - Bank accounts
• GET/POST /api/categories - Income/expense categories
• GET/POST /api/transactions - Income/expense records
• GET/POST /api/items - Products/services

Authentication: HTTP Basic Auth with user email/password. User needs read-api permission (Admin role has this by default).

Troubleshooting

"Payment method is invalid" error: The event listener fix wasn't applied. Run fix_event_listener.py.

401 Unauthorized: Check credentials in config.json. User must have API access permission.

403 Forbidden on contacts/documents: User needs additional permissions for these endpoints.