Norman: Create Invoice

ReviewAudited by ClawScan on May 10, 2026.

Overview

This instruction-only skill is aligned with creating Norman Finance invoices, but it can create persistent client/invoice records and send invoice emails if you approve them.

This skill appears coherent and purpose-aligned. Before using it, confirm you are connected to the correct Norman Finance account, review all invoice details carefully, and only approve sending after verifying the recipient and totals.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Medium

#ASI02: Tool Misuse and Exploitation

What this means

Incorrect details could create an incorrect invoice record, and approving send could email it to a client.

Why it was flagged

These instructions use tools that create business records and optionally send an invoice email. This is purpose-aligned and scoped, but the invoice is created before the review step.

Skill content

If no client exists, offer to create one with `create_client`... Call `create_invoice`... Ask the user if they want to send the invoice now. If yes, call `send_invoice`

Recommendation

Verify the client, line items, VAT, dates, totals, and recipient before creation or sending; ask the agent to show a draft first if needed.

Low

#ASI03: Identity and Privilege Abuse

What this means

The connected Norman Finance account may be used to list clients and create or send invoices.

Why it was flagged

The skill relies on a Norman Finance MCP connection, implying delegated access to the user's Norman Finance workspace for client and invoice operations.

Skill content

requires:
      mcp:
        - norman-finance

Recommendation

Use it only with the intended Norman Finance workspace and ensure the MCP connection has appropriate permissions.

Low

#ASI07: Insecure Inter-Agent Communication

What this means

Client names, invoice amounts, line items, VAT details, and payment terms may be processed by Norman Finance and sent to the selected client.

Why it was flagged

Client and invoice details flow through the Norman Finance MCP workflow and may be sent by email. This is expected for invoicing, but it involves sensitive business data.

Skill content

call `list_clients`... call `create_invoice`... call `send_invoice` to email it to the client

Recommendation

Avoid including unnecessary sensitive information and confirm the recipient and invoice contents before sending.