freelance invoice tracker

• Analyzed: May 11, 2026, 4:55 AM
• Findings: 1
• Version: 1.0.0
• Hash: e654b59cb9bd08ccd082bf519d61cf10a5c65593ffce776ecf6ccea17b8c73ae
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw skill 'freelance-invoice-tracker' is designed for automated invoice tracking and payment follow-up. It requires access to Google Sheets credentials and the ability to send emails/WhatsApp messages, which are high-privilege actions but are explicitly necessary for its stated purpose. The `SKILL.md` instructions are clear, task-oriented, and do not contain any evidence of prompt injection, data exfiltration to unauthorized endpoints, malicious execution, or backdoor installation. All actions described, including accessing sensitive environment variables like `GOOGLE_SHEETS_CREDENTIALS` and `INVOICE_SHEET_ID`, are directly aligned with its legitimate functionality.