← Back to Skills Marketplace
ivangdavila

Invoice

by Iván · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
917
Downloads
2
Stars
6
Active Installs
1
Versions
Install in OpenClaw
/install invoice
Description
Create and send professional invoices with automatic numbering, tax calculation, templates, and payment tracking.
README (SKILL.md)

Role

Create invoices through a structured process. Gather client data, calculate taxes, generate PDF, send, track payment.

Key difference: This skill CREATES invoices to send. The invoices skill MANAGES received invoices.


Storage

~/billing/
├── drafts/                   # Work in progress
│   └── {client-name}/
│       ├── current.md        # Latest version
│       └── versions/         # v001.md, v002.md
├── sent/                     # Finalized invoices
│   └── 2026/
│       └── F-2026-001.pdf
├── clients/                  # Client database
│   └── index.json
├── config.json               # User's business data, templates
└── series.json               # Numbering per series

Quick Reference

Topic File
Invoice creation phases phases.md
Client data management clients.md
Template and PDF generation templates.md
Legal requirements by country legal.md
Invoice types (regular, simplified, credit) types.md

Process Summary

  1. Discovery — Identify client, service, amount. Load or create client record.
  2. Draft — Generate invoice with auto-calculated taxes and next number.
  3. Review — Show preview, allow edits.
  4. Finalize — Generate PDF, lock number.
  5. Send — Email to client (optional).
  6. Track — Monitor payment status.

See phases.md for detailed workflow.


Critical Rules

  • Never reuse numbers — Even cancelled invoices keep their number. Use credit notes for corrections.
  • Correlative numbering — No gaps within a series. F-001, F-002, F-003.
  • Tax calculation — Always show: base, rate, amount, total. Never hide taxes.
  • Client data required — For B2B: company name, tax ID, address. No invoice without complete data.

Configuration Required

Before first invoice, collect:

  • User's business name, tax ID, address
  • Bank details (IBAN) for payment
  • Default tax rate
  • Invoice series format (e.g., "F-2026-")
  • Email for sending (optional)
Usage Guidance
This skill appears internally consistent for local invoice creation, but review these before installing: - Data sensitivity: it will ask you to store personal/business financial data (tax IDs, IBANs, emails) under ~/billing. Keep that directory protected and back it up securely. - Email sending: the skill references sending invoices by email but does not request SMTP credentials in metadata — you will need to provide and protect any mail credentials yourself; don't paste secrets into public chat or insecure places. - PDF tooling: PDF generation mentions WeasyPrint, Puppeteer or browser print. Those tools may need to be installed separately; the skill won’t install them for you. - Automation/recurring invoices: recurring generation requires the agent/platform to run scheduled tasks. Confirm how your agent handles autonomous or scheduled runs and what filesystem/email/network permissions it has. - Legal/tax submissions: the docs mention TicketBAI/Facturae and certificate-based submission but do not implement remote submission. If you need electronic filing, plan for secure certificate storage and official submission tooling. If you accept storing billing data locally and will manage any required external tools/SMTP credentials securely, the skill’s behavior matches its description. If you need guarantees about secret handling or automatic background actions, ask the skill author or platform vendor for details on scheduling, credential storage, and required binaries.
Capability Analysis
Type: OpenClaw Skill Name: invoice Version: 1.0.0 The skill is designed for invoicing, which involves handling sensitive business data and performing file system operations, email sending, and PDF generation. It is classified as 'suspicious' due to significant vulnerabilities, primarily the explicit instruction to use `weasyprint invoice.html invoice.pdf` for PDF generation in `templates.md` and `phases.md`. This presents a clear shell injection risk if the `invoice.html` path or its content (which is dynamically generated from various data, including user input) is not rigorously sanitized. Additionally, the HTML template in `templates.md` uses placeholders that, if not properly HTML-escaped, could lead to cross-site scripting (XSS) or HTML injection in the generated invoice, which could then be exploited during PDF rendering. While there is no evidence of intentional malicious behavior (e.g., data exfiltration or backdoors), these vulnerabilities could be exploited by a malicious user to achieve remote code execution or other harmful actions.
Capability Assessment
Purpose & Capability
Name/description (invoice creation, numbering, taxes, templates, tracking) match the SKILL.md and supporting docs. Required artifacts (client DB, series.json, templates, PDFs, email) are all aligned with invoicing needs; nothing asks for unrelated cloud or system credentials.
Instruction Scope
Instructions explicitly read/write files under ~/billing, generate PDFs (via browser print/WeasyPrint/Puppeteer) and optionally send email. These actions are appropriate for the purpose, but the docs assume external tooling (weasyprint, headless browser or an SMTP mechanism) that the skill does not install or declare. Recurring invoice behavior implies the agent or host will run scheduled tasks — verify how scheduling/automation is handled by your agent platform.
Install Mechanism
Instruction-only skill with no install spec and no code files; lowest install risk. It references external tools (WeasyPrint, Puppeteer) but does not download or execute remote installers itself.
Credentials
The skill does not request environment variables or credentials in metadata, which is proportional. It will ask the user to configure and store sensitive business data locally (business name, tax ID, IBAN, optionally email/SMTP credentials). Storing those data locally is expected for invoicing, but the skill does not describe secure storage/encryption or how SMTP credentials (if used) are provided — you should avoid supplying secrets unless you trust the runtime environment.
Persistence & Privilege
always:false (normal). The skill allows autonomous invocation (platform default), which is required for features like recurring invoices and alerts; this is expected but you should confirm whether your agent platform will actually run background/scheduled tasks and with what permissions. The skill does not attempt to modify other skills or global config.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install invoice
  3. After installation, invoke the skill by name or use /invoice
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Slug invoice
Version 1.0.0
License
All-time Installs 8
Active Installs 6
Total Versions 1
Frequently Asked Questions

What is Invoice?

Create and send professional invoices with automatic numbering, tax calculation, templates, and payment tracking. It is an AI Agent Skill for Claude Code / OpenClaw, with 917 downloads so far.

How do I install Invoice?

Run "/install invoice" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Invoice free?

Yes, Invoice is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Invoice support?

Invoice is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Invoice?

It is built and maintained by Iván (@ivangdavila); the current version is v1.0.0.

💬 Comments