ClawHub

Lap Accounting Api

v1.0.1

Accounting API skill. Use when working with Accounting for companies. Covers 135 endpoints.

⭐ 0· 145·1 current·1 all-time
by@mickmicksh
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the listed endpoints and the skill only requires an ACCOUNTING_API_KEY to call the accounting API (api.codat.io). Nothing requested (binaries, unrelated env vars, or config paths) appears out of scope for an accounting API integration.
✓
Instruction Scope
SKILL.md instructs the agent to set an API key header and call specific Codat endpoints. It does not instruct reading local files, unrelated env vars, or sending data to third-party endpoints outside the documented base URL. The doc references a local file (references/api-spec.lap) that is not present in the manifest — this is an informational inconsistency, not a security risk by itself.
✓
Install Mechanism
No install spec and no code files (instruction-only). Nothing is written to disk or downloaded, which is lower risk.
✓
Credentials
Only one required env var (ACCOUNTING_API_KEY) is declared and is appropriate for calling the API. No other secrets or unrelated credentials are requested.
✓
Persistence & Privilege
always is false and the skill does not request elevated/persistent system presence or modification of other skills. Agent invocation settings are default.
Assessment
This skill appears to be a straightforward instruction-only connector to Codat (api.codat.io). If you install it: (1) provide only a dedicated ACCOUNTING_API_KEY with the minimum necessary permissions; (2) verify the key's scope and rotate it if you stop using the skill; (3) be aware that the SKILL.md references a missing api-spec file (references/api-spec.lap) — that may limit in-skill documentation but does not change runtime behavior; and (4) since the source/homepage is unknown, prefer using keys with limited scope and monitor API activity when first enabling the skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk973qe9fb3fea2q5q3njxfafjs83w5gh

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvACCOUNTING_API_KEY

Comments