invoice-consistency-check-free

SUSPICIOUS. The free invoice-check engine is internally consistent, local-only, and shows no exfiltration or command execution. However, the SKILL.md embeds an optional upsell path that installs another skill via unpinned npx and routes the user into a separate purchase/install workflow, which exceeds the narrow free local-check purpose and adds medium supply-chain/transitive-trust risk.