Invoice Generator

• Analyzed: May 14, 2026, 3:03 AM
• Findings: 1
• Version: 1.0.0
• Hash: a1a0ed99af7e3e44ee59bab473348d033cdea2c88edeba29c5808652af97dda0
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw skill 'invoice-generator' is classified as benign. The skill's purpose is to generate PDF invoices from JSON data, which it achieves by using `node` with `handlebars` for HTML templating, `jq` for JSON parsing and validation, and `weasyprint` for HTML-to-PDF conversion. All operations are local, involving reading JSON from stdin or local files and writing PDF output to a user-defined local directory (`INVOICE_DIR`). There is no evidence of data exfiltration, malicious execution (e.g., remote payload fetching, arbitrary code execution from untrusted input), persistence mechanisms, obfuscation, or prompt injection attempts in `SKILL.md` that would manipulate the agent into unintended actions. The dependencies listed in `package.json` and `package-lock.json` are standard for the stated functionality.