InvoiceGen

• Analyzed: May 10, 2026, 6:28 AM
• Findings: 1
• Version: 1.0.3
• Hash: 7f20feb3edc69b2833ab84b3b5eed6df81f7730049dcbde182a48d8ff8a135e9
• Source: palm
• External report: View on VirusTotal

Findings (1)

The InvoiceGen skill is a well-implemented tool for local invoice management and PDF generation. It demonstrates strong security awareness by implementing path traversal protections and disabling JavaScript execution during PDF rendering in `scripts/generate-invoice-pdf.py`. The instructions in `SKILL.md` and `SETUP-PROMPT.md` prioritize data isolation and proper file permissions (e.g., chmod 600/700), with no evidence of malicious intent, unauthorized network activity, or data exfiltration.