saudi-einvoice

Pass

Audited by Gen Agent Trust Hub on Jun 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses curl to interact with official government API endpoints for tax compliance.
  • Evidence: Multiple code blocks demonstrate curl -X POST requests to gw-fatoora.zatca.gov.sa for reporting and clearance of invoices.
  • [EXTERNAL_DOWNLOADS]: Communicates with external Saudi government domains for e-invoicing services.
  • Evidence: Requests are sent to https://gw-fatoora.zatca.gov.sa and instructions reference https://sandbox.zatca.gov.sa for developer testing.
  • [SAFE]: The skill handles authentication using environment variables (ZATCA_API_KEY), which is a secure and standard practice for managing credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 19, 2026, 12:57 PM
Security Audit — agent-trust-hub — saudi-einvoice