Norman: Invoice Overdue Reminders

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is coherent and requires user approval before sending reminders, but it will access finance data and can send payment reminders to clients.

Before installing, confirm that the Norman Finance connection is the one you intend to use. When running the skill, carefully review each overdue invoice, recipient, reminder wording, and legal/business implications before approving any reminder to be sent.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may access invoice and client information through the connected finance service.

Why it was flagged

The skill depends on a Norman Finance MCP connection, which implies delegated access to the user's finance workspace or account.

Skill content
requires:\n      mcp:\n        - norman-finance
Recommendation

Install only if you trust the Norman Finance connection and are comfortable with the agent using that account to review overdue invoices.

What this means

If approved, the agent can send payment reminders that may affect client relationships and have legal or business implications.

Why it was flagged

The skill can trigger client-facing payment reminders, which is a high-impact business action, but the artifact also requires per-send user confirmation.

Skill content
- Use `send_invoice_overdue_reminder` for each approved reminder\n- Wait for user confirmation before each send
Recommendation

Review each reminder, recipient, amount, due date, and tone before approving any send.