The Agent Skills Directory

[SAFE]: The skill interacts with the vendor's official API endpoint (service.invoice-api.xhub.io) to generate invoice documents. This communication is essential for the skill's primary function and targets the author's own infrastructure.
[SAFE]: Secret management follows industry standards. The skill is designed to retrieve the API key from environment variables or a local .env file, and the instructions explicitly prohibit logging or writing the key to disk.
[SAFE]: Input validation is performed both in the Python scripts and by the remote API. The scripts include checks for date formats and price values, and they sanitize invoice numbers using regular expressions to prevent path traversal when generating filenames.
[SAFE]: The implementation relies exclusively on the Python standard library, which eliminates risks associated with unverified or malicious third-party dependencies.

invoice-create