CtrlK
BlogDocsLog inGet started
Tessl Logo

digits

Digits integration via Apideck's Accounting unified API — same methods work across every connector in Accounting, switch by changing `serviceId`. Use when the user wants to read, write, or reconcile invoices, bills, payments, ledger accounts, and journal entries in Digits. Routes through Apideck with serviceId "digits".

87

Quality

86%

Does it follow best practices?

Impact

No eval scenarios have been run

SecuritybySnyk

Advisory

Suggest reviewing before use

SKILL.md
Quality
Evals
Security

Security

1 medium severity finding. This skill can be installed but you should review these findings before use.

Medium

W009: Direct money access capability detected (payment gateways, crypto, banking)

What this means

The skill is specifically designed for direct financial operations, giving the agent the ability to move money or execute financial transactions — such as payment processing, cryptocurrency operations, banking integrations, or market order execution.

Why it was flagged

Direct money access detected (high risk: 1.00). This skill integrates directly with an accounting provider (Digits) via Apideck's Accounting unified API and is explicitly scoped to read, write, and reconcile invoices, bills, and payments, and to manage ledger accounts and journal entries. Those are financial transaction APIs (creating/updating payments, invoices, bills) — not generic browser automation or a generic HTTP caller. The skill also documents a Proxy API that can forward requests to Digits endpoints with injected auth, which can enable downstream transactional calls. While the doc notes some Digits transactional coverage is limited, the unified Accounting API and proxy explicitly expose financial-write operations (payments/invoices/bills), so this skill provides direct financial execution capabilities.

Report incorrect finding
Repository
apideck-libraries/api-skills
Audited
Security analysis
Snyk

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.