Invoice Automation

• Risk level: Low
• Analyzed: May 1, 2026, 7:21 AM
• Findings: 1
• Version: 98.0.1

Overview

This instruction-only invoice skill is purpose-aligned, but users should review any collection emails before they are sent.

Before installing, confirm this skill will only use invoice and payment data you intend to provide, and require human review before any overdue-payment or collections message is sent.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI02: Tool Misuse and Exploitation

Note

What this means

If used with messaging tools, the agent could prepare or send overdue-payment emails containing amounts, late-fee language, or collection escalation wording.

Why it was flagged

The skill contemplates outbound collection communications, which can affect client relationships if an email or messaging tool is available, but it explicitly requires approval before sending.

Skill content

draft or send overdue payment follow-ups ... NOT for: ... sending client communications without Irfan approval

Recommendation

Review recipients, invoice amounts, tone, late-fee language, and approval status before allowing any message to be sent.