Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Invoicy

v1.0.0

Generate, download, and email professional invoices with GST/IGST support and flexible payment terms.

0· 80·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for krishnakumarmahadevan-cmd/toolweb-invoicy.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Invoicy" (krishnakumarmahadevan-cmd/toolweb-invoicy) from ClawHub.
Skill page: https://clawhub.ai/krishnakumarmahadevan-cmd/toolweb-invoicy
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install toolweb-invoicy

ClawHub CLI

Package manager switcher

npx clawhub@latest install toolweb-invoicy
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The SKILL.md and openapi.json describe a complete invoice service (invoice lifecycle, SMTP email sending, storage, GST handling). However the skill is instruction-only with no implementation, no server/base URL in the OpenAPI, and no install or required credentials. A consumer cannot actually perform the claimed operations from this package alone; that mismatch between claimed capability and what is provided is a coherence concern.
Instruction Scope
The instructions are narrowly scoped to API endpoints and example payloads and do not instruct the agent to read local files, environment variables, or unrelated system state. They do, however, include request fields for sensitive data (bank account, IFSC, UPI, SMTP credentials) which would be supplied as API/body parameters if a backend existed.
Install Mechanism
No install spec or code is provided (instruction-only). This is low-risk from an installation perspective, but it also explains why the skill cannot operate on its own.
Credentials
The skill requests no environment variables or credentials. That is proportionate for a documentation/spec-only asset. However, the examples expect sensitive data to be included in requests (bank account, PAN, GSTIN, SMTP user/pass). Because there is no target server specified, supplying such secrets would be risky — there is no clear authority or endpoint to receive them.
Persistence & Privilege
The skill does not request persistent or elevated privileges and is not always-enabled. There is no evidence it modifies other skills or system settings.
What to consider before installing
This package appears to be documentation/OpenAPI for an invoice API rather than a working connector. Before installing or using it: (1) do not provide real bank, PAN, GSTIN, or SMTP credentials to this skill — there is no server URL or trusted backend specified; (2) ask the publisher for the API base URL and hosting details and verify the HTTPS endpoint and privacy policy; (3) if you need an executable connector, prefer a skill that includes a clear server address or code and requests only the minimum necessary credentials; (4) treat this as a spec or template only, not a drop-in service — avoid sending secrets into the agent until you confirm where they will be stored/transmitted.

Like a lobster shell, security has layers — review code before you run it.

latestvk971vq8f4tgjmkb4pva9esnc2n842v1s
80downloads
0stars
1versions
Updated 3w ago
v1.0.0
MIT-0

Overview

Invoice Generator is a comprehensive invoice management API that enables businesses to create, customize, and distribute professional invoices programmatically. Built for e-commerce platforms, accounting systems, and billing automation, it supports multi-currency transactions, Indian GST/IGST compliance, and direct email distribution to customers.

The tool provides complete invoice lifecycle management—from generation with line-item details, tax calculations, and payment terms, to secure download and automated email delivery. It integrates seamlessly with SMTP servers for direct email transmission and maintains invoice records for later retrieval.

Ideal users include SaaS billing platforms, freelance management systems, accounting software providers, and e-commerce businesses requiring automated invoice workflows with professional formatting and compliance support.

Usage

Generate an invoice for a consulting service with GST:

{
  "company": {
    "name": "TechCorp Solutions",
    "address": "123 Business Park",
    "city": "Bangalore",
    "state": "Karnataka",
    "pincode": "560001",
    "phone": "+91-80-XXXX-XXXX",
    "email": "billing@techcorp.com",
    "gstin": "18AABCT1234H1Z0",
    "pan": "AAACT1234H",
    "logo_url": "https://example.com/logo.png"
  },
  "customer": {
    "name": "Acme Corporation",
    "address": "456 Client Street",
    "city": "Mumbai",
    "state": "Maharashtra",
    "pincode": "400001",
    "phone": "+91-22-XXXX-XXXX",
    "email": "accounts@acme.com",
    "gstin": "27AABCT5678H1Z1"
  },
  "items": [
    {
      "description": "Consulting Services - Q1 2024",
      "quantity": 1,
      "rate": 50000,
      "tax_percent": 18
    },
    {
      "description": "Development Hours (120 hrs @ 500/hr)",
      "quantity": 120,
      "rate": 500,
      "tax_percent": 18
    }
  ],
  "invoice_number": "INV-2024-001",
  "invoice_date": "2024-01-15",
  "due_date": "2024-02-15",
  "payment_terms": "Net 30",
  "notes": "Thank you for your business. Payment via bank transfer preferred.",
  "bank_name": "HDFC Bank",
  "account_number": "1234567890123456",
  "ifsc_code": "HDFC0000123",
  "upi_id": "techcorp@hdfc",
  "is_igst": false
}

Sample Response:

{
  "invoice_id": "inv_7f8a9b2c1e5d3k4m",
  "status": "generated",
  "subtotal": 110000,
  "tax_amount": 19800,
  "total_amount": 129800,
  "created_at": "2024-01-15T10:30:45Z",
  "message": "Invoice generated successfully"
}

Endpoints

GET /

Root endpoint – Returns API information and health status.

ParameterTypeRequiredDescription
No parameters

Response: JSON object with service metadata.


GET /status

Status check – Returns current API health and operational status.

ParameterTypeRequiredDescription
No parameters

Response: JSON object with status information and service uptime.


POST /generate

Generate Invoice – Creates a new invoice from company, customer, and line item details.

Request Body:

FieldTypeRequiredDescription
companyCompanyDetailsYesCompany/seller information including name, address, tax IDs, contact details, and optional logo URL
customerCustomerDetailsYesCustomer/buyer information including name, address, tax IDs, and contact details
itemsLineItem[]YesArray of line items with description, quantity, rate, and optional tax percentage
invoice_numberstringNoCustom invoice number (auto-generated if omitted)
invoice_datestringNoInvoice issuance date in YYYY-MM-DD format
due_datestringNoPayment due date in YYYY-MM-DD format
payment_termsstringNoPayment terms description (default: "Due on Receipt")
notesstringNoAdditional notes or payment instructions
bank_namestringNoBank name for payment details
account_numberstringNoBank account number
ifsc_codestringNoIFSC code for Indian bank transfers
upi_idstringNoUPI ID for digital payments
is_igstbooleanNoSet to true for IGST (Integrated GST), false for SGST+CGST (default: false)

Response: JSON object containing:

  • invoice_id: Unique identifier for retrieving/downloading the invoice
  • status: Generation status ("generated")
  • subtotal: Total amount before tax
  • tax_amount: Calculated tax amount
  • total_amount: Final invoice total
  • created_at: Timestamp of invoice creation

GET /download/{invoice_id}

Download Invoice – Retrieves and downloads a previously generated invoice as PDF.

ParameterTypeRequiredDescription
invoice_idstringYesUnique identifier of the invoice to download (path parameter)

Response: PDF file download or JSON error with appropriate HTTP status.


POST /send-email

Send Email – Sends a generated invoice to a specified email address via SMTP.

Request Body:

FieldTypeRequiredDescription
invoice_idstringYesUnique identifier of the invoice to email
to_emailstringYesRecipient email address (must be valid email format)
to_namestringNoRecipient's display name (default: empty)
from_emailstringYesSender email address (must be valid email format)
from_namestringNoSender's display name (default: empty)
subjectstringNoEmail subject line (default: empty)
messagestringNoEmail body/message text (default: empty)
smtp_hoststringNoSMTP server hostname (default: "localhost")
smtp_portintegerNoSMTP server port number (default: 587)
smtp_userstringNoSMTP authentication username (default: empty)
smtp_passstringNoSMTP authentication password (default: empty)
use_tlsbooleanNoEnable TLS encryption (default: true)

Response: JSON object containing:

  • status: Email delivery status ("sent", "pending", or "failed")
  • message: Status message with delivery details
  • timestamp: Email send timestamp

Pricing

PlanCalls/DayCalls/MonthPrice
Free550Free
Developer20500$39/mo
Professional2005,000$99/mo
Enterprise100,0001,000,000$299/mo

About

ToolWeb.in - 200+ security APIs, CISSP & CISM, platforms: Pay-per-run, API Gateway, MCP Server, OpenClaw, RapidAPI, YouTube.

References

Comments

Loading comments...