saudi-einvoice

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill interacts exclusively with official ZATCA (Saudi government) domains (zatca.gov.sa) for e-invoicing compliance and reporting. Use of well-known government services is considered a safe and standard integration.
  • [EXTERNAL_DOWNLOADS]: The skill uses curl to send data to the official ZATCA API. These are standard API interactions with a well-known government service and do not involve downloading or executing untrusted code.
  • [CREDENTIALS_UNSAFE]: The skill correctly instructs the user to store their API key in an environment variable (ZATCA_API_KEY), which is a secure practice for secret management.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 01:16 PM
Security Audit — agent-trust-hub — saudi-einvoice