szamlazz-invoicing
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install a plugin from a third-party GitHub repository (
github.com/socialproKGCMG/socialpro-plugins) and a Python dependency (pyyaml). These are standard installation procedures for the described functionality. - [CREDENTIALS_UNSAFE]: The skill mentions using an 'Agent API key' but explicitly notes that it should be stored in the OS credential store and is never echoed to stdout, which is a security best practice. It does not contain any hardcoded secrets.
- [DATA_EXFILTRATION]: While the skill communicates with the szamlazz.hu API and the Hungarian Tax Authority (NAV), these are the primary intended functions of the skill. No unauthorized data exfiltration patterns were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill processes natural language input to generate invoices. While this presents an attack surface for indirect prompt injection (e.g., malicious descriptions in invoice items), the skill includes a mandatory confirmation step before final execution, mitigating the risk of unintended actions.
Audit Metadata