Skip to main content

killbill-admin

Manages billing, subscriptions, and invoices in KillBill with commands for tenant management and overdue state testing.

Install this skill

or
22/100

Security score

The killbill-admin skill was audited on Feb 12, 2026 and we found 50 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 246

Curl to non-GitHub URL

SourceSKILL.md
246sleep 15 && curl -s "http://billing.62.171.153.219.nip.io/1.0/healthcheck" | python3 -c "import sys, json; data=json.load(sys.stdin); print('Healthy' if data.get('org.killbill.billing.server.healthche
medium line 253

Curl to non-GitHub URL

SourceSKILL.md
253curl -s "http://billing.62.171.153.219.nip.io/1.0/healthcheck"
medium line 258

Curl to non-GitHub URL

SourceSKILL.md
258curl -s "http://billing.62.171.153.219.nip.io/1.0/healthcheck" | python3 -c "import sys, json; data=json.load(sys.stdin); print('Healthy' if data.get('org.killbill.billing.server.healthchecks.Killbill
medium line 390

Curl to non-GitHub URL

SourceSKILL.md
390curl -s "http://billing.62.171.153.219.nip.io/1.0/healthcheck"
medium line 21

Webhook reference - potential data exfiltration

SourceSKILL.md
21- Configure webhook callbacks
medium line 380

Webhook reference - potential data exfiltration

SourceSKILL.md
380- Always check logs after webhook events: `docker logs saasodoo-billing-service --tail 100`
medium line 396

Webhook reference - potential data exfiltration

SourceSKILL.md
396### Webhooks Not Firing
low line 398

Webhook reference - potential data exfiltration

SourceSKILL.md
398# Check webhook configuration
low line 405

Webhook reference - potential data exfiltration

SourceSKILL.md
405docker logs saasodoo-billing-service --tail 100 2>&1 | grep -E "webhook|INVOICE|SUBSCRIPTION"
low line 45

External URL reference

SourceSKILL.md
45**KillBill URL (via Traefik)**: `http://billing.62.171.153.219.nip.io`
low line 61

External URL reference

SourceSKILL.md
61"http://billing.62.171.153.219.nip.io/1.0/kb/tenants"
low line 79

External URL reference

SourceSKILL.md
79"http://localhost:8080/1.0/kb/tenants/uploadPluginConfig/killbill-catalog"
low line 89

External URL reference

SourceSKILL.md
89"http://billing.62.171.153.219.nip.io/1.0/kb/test/clock"
low line 98

External URL reference

SourceSKILL.md
98"http://billing.62.171.153.219.nip.io/1.0/kb/test/clock?requestedDate=2026-04-01T02:00:00.000Z"
low line 107

External URL reference

SourceSKILL.md
107"http://billing.62.171.153.219.nip.io/1.0/kb/test/clock?requestedDate=$(date -u +"%Y-%m-%dT%H:%M:%S.000Z")"
low line 117

External URL reference

SourceSKILL.md
117"http://billing.62.171.153.219.nip.io/1.0/kb/accounts?externalKey=CUSTOMER_ID_HERE" | python3 -m json.tool
low line 125

External URL reference

SourceSKILL.md
125"http://billing.62.171.153.219.nip.io/1.0/kb/accounts/ACCOUNT_ID_HERE/bundles" | python3 -m json.tool
low line 133

External URL reference

SourceSKILL.md
133"http://billing.62.171.153.219.nip.io/1.0/kb/accounts/ACCOUNT_ID_HERE?accountWithBalance=true" | python3 -m json.tool
low line 141

External URL reference

SourceSKILL.md
141"http://billing.62.171.153.219.nip.io/1.0/kb/accounts/ACCOUNT_ID_HERE/overdue"
low line 149

External URL reference

SourceSKILL.md
149"http://billing.62.171.153.219.nip.io/1.0/kb/accounts/ACCOUNT_ID_HERE/invoices?unpaidInvoicesOnly=true&withItems=false" | python3 -m json.tool
low line 159

External URL reference

SourceSKILL.md
159"http://billing.62.171.153.219.nip.io/1.0/kb/subscriptions/SUBSCRIPTION_ID_HERE" | python3 -m json.tool
low line 167

External URL reference

SourceSKILL.md
167"http://billing.62.171.153.219.nip.io/1.0/kb/subscriptions/SUBSCRIPTION_ID_HERE" | python3 -m json.tool | grep -E "state|cancelledDate|chargedThroughDate|phaseType"
low line 177

External URL reference

SourceSKILL.md
177"http://billing.62.171.153.219.nip.io/1.0/kb/invoices/INVOICE_ID_HERE?withItems=true" | python3 -m json.tool
low line 187

External URL reference

SourceSKILL.md
187"http://billing.62.171.153.219.nip.io/1.0/kb/bundles/BUNDLE_ID_HERE" | python3 -m json.tool
low line 198

External URL reference

SourceSKILL.md
198"http://billing.62.171.153.219.nip.io/1.0/kb/accounts/ACCOUNT_ID_HERE/paymentMethods/PAYMENT_METHOD_ID_HERE/setDefault"
low line 208

External URL reference

SourceSKILL.md
208"http://billing.62.171.153.219.nip.io/1.0/kb/tenants/userKeyValue/PUSH_NOTIFICATION_CB"
low line 216

External URL reference

SourceSKILL.md
216"http://billing.62.171.153.219.nip.io/1.0/kb/tenants/userKeyValue/PAYMENT_RETRY_DAYS" | python3 -m json.tool
low line 224

External URL reference

SourceSKILL.md
224"http://billing.62.171.153.219.nip.io/1.0/kb/tenants/userKeyValue/OVERDUE_CONFIG" | python3 -c "import sys, json; data=json.load(sys.stdin); print(data['values'][0])"
low line 240

External URL reference

SourceSKILL.md
240"http://localhost:8080/1.0/kb/tenants/userKeyValue/OVERDUE_CONFIG"
low line 246

External URL reference

SourceSKILL.md
246sleep 15 && curl -s "http://billing.62.171.153.219.nip.io/1.0/healthcheck" | python3 -c "import sys, json; data=json.load(sys.stdin); print('Healthy' if data.get('org.killbill.billing.server.healthche
low line 253

External URL reference

SourceSKILL.md
253curl -s "http://billing.62.171.153.219.nip.io/1.0/healthcheck"
low line 258

External URL reference

SourceSKILL.md
258curl -s "http://billing.62.171.153.219.nip.io/1.0/healthcheck" | python3 -c "import sys, json; data=json.load(sys.stdin); print('Healthy' if data.get('org.killbill.billing.server.healthchecks.Killbill
low line 285

External URL reference

SourceSKILL.md
285"http://billing.62.171.153.219.nip.io/1.0/kb/subscriptions/$SUBSCRIPTION_ID" | python3 -m json.tool
low line 291

External URL reference

SourceSKILL.md
291"http://billing.62.171.153.219.nip.io/1.0/kb/test/clock"
low line 298

External URL reference

SourceSKILL.md
298"http://billing.62.171.153.219.nip.io/1.0/kb/test/clock?requestedDate=2027-02-25T03:00:00.000Z"
low line 310

External URL reference

SourceSKILL.md
310"http://billing.62.171.153.219.nip.io/1.0/kb/accounts/$ACCOUNT_ID/paymentMethods/$PAYMENT_METHOD_ID/setDefault"
low line 318

External URL reference

SourceSKILL.md
318"http://billing.62.171.153.219.nip.io/1.0/kb/test/clock?requestedDate=2027-03-07T03:00:00.000Z"
low line 324

External URL reference

SourceSKILL.md
324"http://billing.62.171.153.219.nip.io/1.0/kb/accounts/$ACCOUNT_ID/overdue"
low line 331

External URL reference

SourceSKILL.md
331"http://billing.62.171.153.219.nip.io/1.0/kb/test/clock?requestedDate=2027-03-11T03:00:00.000Z"
low line 338

External URL reference

SourceSKILL.md
338"http://billing.62.171.153.219.nip.io/1.0/kb/test/clock?requestedDate=2027-03-25T03:00:00.000Z"
low line 349

External URL reference

SourceSKILL.md
349"http://billing.62.171.153.219.nip.io/1.0/kb/accounts/$ACCOUNT_ID?accountWithBalance=true" | python3 -m json.tool
low line 355

External URL reference

SourceSKILL.md
355"http://billing.62.171.153.219.nip.io/1.0/kb/accounts/$ACCOUNT_ID/overdue"
low line 361

External URL reference

SourceSKILL.md
361"http://billing.62.171.153.219.nip.io/1.0/kb/accounts/$ACCOUNT_ID/invoices?unpaidInvoicesOnly=true" | python3 -m json.tool
low line 370

External URL reference

SourceSKILL.md
3705. **Traefik Access**: All KillBill API calls can be made via `http://billing.62.171.153.219.nip.io`
low line 378

External URL reference

SourceSKILL.md
378- **Traefik URL** (host accessible): `http://billing.62.171.153.219.nip.io`
low line 379

External URL reference

SourceSKILL.md
379- **Internal URL** (Docker network only): `http://killbill:8080`
low line 390

External URL reference

SourceSKILL.md
390curl -s "http://billing.62.171.153.219.nip.io/1.0/healthcheck"
low line 402

External URL reference

SourceSKILL.md
402"http://billing.62.171.153.219.nip.io/1.0/kb/tenants/userKeyValue/PUSH_NOTIFICATION_CB"
low line 414

External URL reference

SourceSKILL.md
414"http://billing.62.171.153.219.nip.io/1.0/kb/accounts/ACCOUNT_ID/paymentMethods"
low line 420

External URL reference

SourceSKILL.md
420"http://billing.62.171.153.219.nip.io/1.0/kb/tenants/userKeyValue/OVERDUE_CONFIG"
Scanned on Feb 12, 2026
View Security Dashboard
Installation guide →