ClawHub

GL importer

v1.0.1

Import CSV/XLSX accounting data into QuickBooks Online or Xero via the Synder Importer REST API. Use when asked to import invoices, bills, journal entries, c...

⭐ 2· 192·0 current·0 all-time
bySynder@michaelastreikosynder
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, README instructions, and the referenced API docs consistently describe importing spreadsheet accounting data into QuickBooks Online or Xero via the Synder Importer API. The single required credential (IMPORTER_API_TOKEN) is appropriate for that API and no unrelated secrets/binaries are requested.
✓
Instruction Scope
SKILL.md gives explicit curl-based workflows for listing companies, mapping fields, uploading files, polling status, canceling/reverting imports, and recommends dryRun first. It only references the CSV/XLSX files to upload and the provider account context; it does not instruct reading unrelated system files or exfiltrating data to unknown endpoints. It clearly documents that files are uploaded to importer.synder.com and forwarded to the connected accounting provider.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files. No downloads or package installs are performed by the skill, so there is no install-time execution risk.
✓
Credentials
Only IMPORTER_API_TOKEN is required (documented in SKILL.md). That token is necessary and proportionate for authenticating to the Synder Importer API. No other secrets, config paths, or unrelated service tokens are requested.
✓
Persistence & Privilege
Skill is not always-enabled and does not request system persistence or modify other skills. It relies on outbound HTTP calls to the documented API, which is expected for its purpose. Autonomous model invocation is allowed by platform default but is not combined with elevated privileges here.
Assessment
This skill appears coherent and implements the expected workflow for importing spreadsheets into QuickBooks Online/Xero via Synder. Before installing: 1) only provide an IMPORTER_API_TOKEN from importer.synder.com and verify you trust Synder's service and privacy policy (uploads contain sensitive financial data that will be forwarded to your accounting provider); 2) follow the SKILL.md recommendation to run dryRun=true and test with non-production data; 3) confirm you select the correct company ID when importing; 4) be prepared to revoke the API token from the Synder web UI if you no longer want the skill to have access. There are no hidden installs or unrelated credential requests, but remember that using the skill will send spreadsheet contents to a third party (Synder) for processing.

Like a lobster shell, security has layers — review code before you run it.

latestvk97342excxr97x0b0hbzzhexen82rnk9

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments