← 返回 Skills 市场
ivangdavila

Invoice

作者 Iván · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
917
总下载
2
收藏
6
当前安装
1
版本数
在 OpenClaw 中安装
/install invoice
功能描述
Create and send professional invoices with automatic numbering, tax calculation, templates, and payment tracking.
使用说明 (SKILL.md)

Role

Create invoices through a structured process. Gather client data, calculate taxes, generate PDF, send, track payment.

Key difference: This skill CREATES invoices to send. The invoices skill MANAGES received invoices.


Storage

~/billing/
├── drafts/                   # Work in progress
│   └── {client-name}/
│       ├── current.md        # Latest version
│       └── versions/         # v001.md, v002.md
├── sent/                     # Finalized invoices
│   └── 2026/
│       └── F-2026-001.pdf
├── clients/                  # Client database
│   └── index.json
├── config.json               # User's business data, templates
└── series.json               # Numbering per series

Quick Reference

Topic File
Invoice creation phases phases.md
Client data management clients.md
Template and PDF generation templates.md
Legal requirements by country legal.md
Invoice types (regular, simplified, credit) types.md

Process Summary

  1. Discovery — Identify client, service, amount. Load or create client record.
  2. Draft — Generate invoice with auto-calculated taxes and next number.
  3. Review — Show preview, allow edits.
  4. Finalize — Generate PDF, lock number.
  5. Send — Email to client (optional).
  6. Track — Monitor payment status.

See phases.md for detailed workflow.


Critical Rules

  • Never reuse numbers — Even cancelled invoices keep their number. Use credit notes for corrections.
  • Correlative numbering — No gaps within a series. F-001, F-002, F-003.
  • Tax calculation — Always show: base, rate, amount, total. Never hide taxes.
  • Client data required — For B2B: company name, tax ID, address. No invoice without complete data.

Configuration Required

Before first invoice, collect:

  • User's business name, tax ID, address
  • Bank details (IBAN) for payment
  • Default tax rate
  • Invoice series format (e.g., "F-2026-")
  • Email for sending (optional)
安全使用建议
This skill appears internally consistent for local invoice creation, but review these before installing: - Data sensitivity: it will ask you to store personal/business financial data (tax IDs, IBANs, emails) under ~/billing. Keep that directory protected and back it up securely. - Email sending: the skill references sending invoices by email but does not request SMTP credentials in metadata — you will need to provide and protect any mail credentials yourself; don't paste secrets into public chat or insecure places. - PDF tooling: PDF generation mentions WeasyPrint, Puppeteer or browser print. Those tools may need to be installed separately; the skill won’t install them for you. - Automation/recurring invoices: recurring generation requires the agent/platform to run scheduled tasks. Confirm how your agent handles autonomous or scheduled runs and what filesystem/email/network permissions it has. - Legal/tax submissions: the docs mention TicketBAI/Facturae and certificate-based submission but do not implement remote submission. If you need electronic filing, plan for secure certificate storage and official submission tooling. If you accept storing billing data locally and will manage any required external tools/SMTP credentials securely, the skill’s behavior matches its description. If you need guarantees about secret handling or automatic background actions, ask the skill author or platform vendor for details on scheduling, credential storage, and required binaries.
功能分析
Type: OpenClaw Skill Name: invoice Version: 1.0.0 The skill is designed for invoicing, which involves handling sensitive business data and performing file system operations, email sending, and PDF generation. It is classified as 'suspicious' due to significant vulnerabilities, primarily the explicit instruction to use `weasyprint invoice.html invoice.pdf` for PDF generation in `templates.md` and `phases.md`. This presents a clear shell injection risk if the `invoice.html` path or its content (which is dynamically generated from various data, including user input) is not rigorously sanitized. Additionally, the HTML template in `templates.md` uses placeholders that, if not properly HTML-escaped, could lead to cross-site scripting (XSS) or HTML injection in the generated invoice, which could then be exploited during PDF rendering. While there is no evidence of intentional malicious behavior (e.g., data exfiltration or backdoors), these vulnerabilities could be exploited by a malicious user to achieve remote code execution or other harmful actions.
能力评估
Purpose & Capability
Name/description (invoice creation, numbering, taxes, templates, tracking) match the SKILL.md and supporting docs. Required artifacts (client DB, series.json, templates, PDFs, email) are all aligned with invoicing needs; nothing asks for unrelated cloud or system credentials.
Instruction Scope
Instructions explicitly read/write files under ~/billing, generate PDFs (via browser print/WeasyPrint/Puppeteer) and optionally send email. These actions are appropriate for the purpose, but the docs assume external tooling (weasyprint, headless browser or an SMTP mechanism) that the skill does not install or declare. Recurring invoice behavior implies the agent or host will run scheduled tasks — verify how scheduling/automation is handled by your agent platform.
Install Mechanism
Instruction-only skill with no install spec and no code files; lowest install risk. It references external tools (WeasyPrint, Puppeteer) but does not download or execute remote installers itself.
Credentials
The skill does not request environment variables or credentials in metadata, which is proportional. It will ask the user to configure and store sensitive business data locally (business name, tax ID, IBAN, optionally email/SMTP credentials). Storing those data locally is expected for invoicing, but the skill does not describe secure storage/encryption or how SMTP credentials (if used) are provided — you should avoid supplying secrets unless you trust the runtime environment.
Persistence & Privilege
always:false (normal). The skill allows autonomous invocation (platform default), which is required for features like recurring invoices and alerts; this is expected but you should confirm whether your agent platform will actually run background/scheduled tasks and with what permissions. The skill does not attempt to modify other skills or global config.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install invoice
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /invoice 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
Slug invoice
版本 1.0.0
许可证
累计安装 8
当前安装数 6
历史版本数 1
常见问题

Invoice 是什么?

Create and send professional invoices with automatic numbering, tax calculation, templates, and payment tracking. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 917 次。

如何安装 Invoice?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install invoice」即可一键安装,无需额外配置。

Invoice 是免费的吗?

是的,Invoice 完全免费(开源免费),可自由下载、安装和使用。

Invoice 支持哪些平台?

Invoice 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Invoice?

由 Iván(@ivangdavila)开发并维护,当前版本 v1.0.0。

💬 留言讨论