FactuCat CLI
v1.0.0Use this skill when an agent needs to install, update, authenticate, or operate the FactuCat CLI to create Mexican CFDI 4.0 invoice drafts, assign customers...
⭐ 0· 70·0 current·0 all-time
byOmar Cruz@ocruzv
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, declared binary requirement (factucat), primary credential (FACTUCAT_API_KEY), and examples in SKILL.md all consistently reference operating the FactuCat CLI and FactuCat service (factucat.com). There are no unrelated credentials or binaries requested.
Instruction Scope
SKILL.md instructs installation, authentication, interactive and unattended CLI usage and references local README-style files for flows and troubleshooting. The instructions only reference the factucat binary, the FactuCat site, and local reference files; they do not request reading arbitrary system files or exfiltrating data to unexpected endpoints.
Install Mechanism
Install uses npm (@factucat/cli) to create the factucat binary — this is a standard and expected mechanism for a JS-based CLI. npm packages carry moderate trust implications (third-party code execution), so verifying the package source/maintainer before installing is advised.
Credentials
The only declared credential is FACTUCAT_API_KEY (the skill's primaryEnv). No unrelated environment variables or config paths are requested. The use of an API key is proportional to a CLI that authenticates to a remote invoicing service.
Persistence & Privilege
The skill does not request always:true or elevated persistent privileges. It is user-invocable and permits autonomous invocation by default (platform normal). There is no indication it modifies other skills or system-wide agent settings.
Assessment
This skill appears to do what it says, but take common-sense precautions before installing and using it: verify the npm package owner and the GitHub repository (ensure @factucat/cli is the official package), review the package contents or install in a sandbox if you distrust it, and do not paste your production FACTUCAT_API_KEY into unfamiliar or untrusted environments. Note the SKILL.md's unusual UX detail (typing a Konami code in the site to reveal the API keys) — this is odd but product-specific rather than a security indicator. If you need stricter control, create a scoped or test API key on factucat.com with limited permissions and use that with agent automation.Like a lobster shell, security has layers — review code before you run it.
latestvk977bdrz429ea30p57v6bhyazd83n1m0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🧾 Clawdis
Binsfactucat
Primary envFACTUCAT_API_KEY
Install
Install FactuCat CLI (npm)
Bins: factucat
npm i -g @factucat/cli