Norman: Create Invoice

• Outcome: Pass
• Latest audit: May 28, 2026, 2:38 AM
• Version:
  1.0.0

Overview

This skill appears to do what it says: help create and optionally send invoices, with no evidence of hidden access or malicious behavior.

Before installing, confirm that your agent or finance workflow asks for review before creating or sending real invoices, especially when a request uses casual wording like billing a client.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The description uses broad natural-language triggers like 'invoice someone' and 'bill a client,' which can cause the skill to be selected for loosely related user requests. Because this skill can create and optionally send invoices, accidental invocation could lead to unintended financial workflow actions or premature progression toward sending a bill.

VirusTotal

66/66 vendors flagged this skill as clean.