📦 InvoiceForge API — 专业发票生成
v1.0.0使用 InvoiceForge API 自动生成专业 PDF 发票，适用于自由职业者、代理机构、顾问、小型企业、SaaS 公司、承包商和自动化账单需求。
0· 229·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
medium confidence该技能用于发票目的，但指示代理创建账户并将用户电子邮件/API 密钥发布到未验证的外部域名，省略了来源细节，使用时请谨慎。
评估建议
该技能看似正常生成/下载发票，但 API 端点和发布者未经验证。安装前：1) 验证供应商/域名（invoiceforge.vosscg.com）和寻找官方主页、隐私政策或公司身份。2)prefer 在供应商网站上自己创建 API 密钥并将其粘贴到代理，而不是让代理使用您的电子邮件自动创建账户。3) 确保代理将 API 密钥存储在安全的秘密存储中（不在明文聊天或日志中），并旋转/删除不再使用的密钥。4) 使用非敏感样本数据进行测试。5) 如果需要更高的保证，请要求发布者提供文档或转移到已知的审计发票提供商。...详细分析 ▾
ℹ 用途与能力
The SKILL.md describes creating and managing invoices via an API and the curl examples map to that purpose (create key, create/list invoices, download PDF). However the skill's source/homepage is unknown and the API domain (invoiceforge.vosscg.com) is not documented or referenced elsewhere in metadata, which weakens provenance and trustworthiness.
⚠ 指令范围
The runtime instructions tell the agent to collect the user's email and POST it to an external API to create an API key — this entails sending personal data to a third party automatically. The instructions also say to “store the API key securely” but give no guidance on where or how; the agent could end up storing credentials in an unexpected place. These behaviors are within the invoicing scope but carry privacy and exfiltration risk because the external service and account-creation flow are unverified.
✓ 安装机制
No install spec and no code files (instruction-only) means nothing will be written or installed by the skill itself. This reduces filesystem/remote-install risk.
ℹ 凭证需求
The skill declares no required environment variables or credentials, yet the instructions require an API key obtained from the external service and say to save it for future use. There is a mild mismatch: users/agents will need to store and provide an API key at runtime even though no env vars are declared. That lack of explicitness can lead to insecure handling of secrets.
✓ 持久化与权限
always is false and the skill does not request persistent/global privileges. The default ability for the agent to invoke the skill autonomously is enabled (platform default) but not combined with other high-risk privileges here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/5
InvoiceForge API 技能初始发布：- 使用 InvoiceForge API 程序化生成专业 PDF 发票。- 支持 API 密钥注册和安全密钥存储流程。- 通过简单端点创建、列出、下载和更新发票状态。- 处理批量发票、发票跟踪和多币种支持。- 包括速率限制、端点摘要和错误代码信息。- 设计用于自由职业者、企业、SaaS、承包商和账单自动化需求。
● 无害
安装命令
点击复制官方npx clawhub@latest install invoiceforge-api
镜像加速npx clawhub@latest install invoiceforge-api --registry https://cn.longxiaskill.com镜像同步中
技能文档
生成专业 PDF 发票使用 VCG 的 InvoiceForge API — 纯软件发票生成，自动计算，PDF 渲染和发票管理。
快速开始
- 获取 API 密钥：帮助用户注册免费 InvoiceForge API 密钥
- 存储密钥：安全保存密钥
- 创建发票：从结构化数据生成专业 PDF 发票