Invoice Generator
v1.0.0Generate professional invoices from project data — line items, tax calculation, payment terms, and formatted output. Supports freelance, agency, and SaaS bil...
⭐ 0· 48·0 current·0 all-time
by@tktk-ai
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
Name and description (invoice creation, calculations, reminders) match the SKILL.md content. The skill requires no binaries, env vars, or installs, which is proportionate for an instruction-only drafting/formatting skill.
Instruction Scope
Instructions stay focused on generating invoice text, layouts, and reminder drafts. The README and SKILL.md claim 'tracks outstanding invoices and sends payment reminders' but provide no mechanism or credentials for sending emails or connecting to payment processors — the skill appears limited to drafting and tracking artifacts conceptually, not performing network actions. References to local files (references/*.md) exist but those files are not included; this is a documentation gap, not an immediate security concern.
Install Mechanism
No install spec and no code files — lowest-risk instruction-only skill. Nothing is downloaded or written to disk by the skill package itself.
Credentials
The skill requests no environment variables, credentials, or config paths. There are no unexplained secret requests or access demands that would be disproportionate to invoicing functionality.
Persistence & Privilege
always is false and autonomous invocation is allowed by default (normal). The skill does not request persistent system-wide changes or cross-skill configuration; no elevated presence is requested.
Assessment
This skill is instruction-only and appears to only draft invoices and reminder text — it does not actually send emails or process payments on its own. If you expect automated sending or payment collection, you'll need to supply integrations (SMTP, Stripe, etc.) and corresponding credentials; verify any integration before providing secrets. Note the SKILL references missing docs (references/*.md) — ask the author or inspect updated files if you need those templates. As always, install only skills from sources you trust and avoid granting credentials unless you understand exactly which external service the skill will use.Like a lobster shell, security has layers — review code before you run it.
latestvk975akbczd75wczt6me5kn3jx984eer9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.