invoice-create

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill makes runtime API calls to invoice-api.xhub.io using a common unofficial cloud service without first-party authentication guarantees, constituting a medium-tier operational dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill creates e-invoices (ZUGFeRD/Factur-X PDF or XRechnung XML) via an API (invoice-api.xhub.io), which constitutes an indirect financial operation (creating bills/invoices for downstream handling). Under the evaluation framework, indirect financial operations are classified as medium severity.