Maverick Smartbill Invoicing

• Analyzed: May 13, 2026, 11:41 AM
• Findings: 1
• Version: 1.0.0
• Hash: ee397da70bf2879bc295d15820bc29a8871b522b9c29d257a57a71086fb774b1
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a well-structured tool for automating SmartBill invoicing with clear security considerations. The core script (scripts/smartbill_cli.py) implements robust path validation in the _safe_output_path function to prevent path traversal and unauthorized file overwrites, specifically restricting PDF downloads to allowed OpenClaw media roots and the current working directory. The instructions in SKILL.md and agents/openai.yaml emphasize safety protocols, such as mandatory dry-runs and explicit user confirmation for final invoice issuance, effectively hardening the agent against accidental or malicious misuse.