Skip to main content

xero

Facilitates Xero accounting management, including invoices, contacts, and reports through the Xero API.

Install this skill

or
69/100

Security score

The xero skill was audited on May 23, 2026 and we found 11 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 21

Curl to non-GitHub URL

SourceSKILL.md
21curl "https://api.xero.com/api.xro/2.0/Contacts" \
medium line 30

Curl to non-GitHub URL

SourceSKILL.md
30curl -X POST "https://api.xero.com/api.xro/2.0/Invoices" \
medium line 48

Curl to non-GitHub URL

SourceSKILL.md
48curl "https://api.xero.com/api.xro/2.0/Invoices" \
medium line 57

Curl to non-GitHub URL

SourceSKILL.md
57curl "https://api.xero.com/api.xro/2.0/BankTransactions" \
medium line 65

Curl to non-GitHub URL

SourceSKILL.md
65curl "https://api.xero.com/api.xro/2.0/Reports/ProfitAndLoss?fromDate=2024-01-01&toDate=2024-12-31" \
low line 21

External URL reference

SourceSKILL.md
21curl "https://api.xero.com/api.xro/2.0/Contacts" \
low line 30

External URL reference

SourceSKILL.md
30curl -X POST "https://api.xero.com/api.xro/2.0/Invoices" \
low line 48

External URL reference

SourceSKILL.md
48curl "https://api.xero.com/api.xro/2.0/Invoices" \
low line 57

External URL reference

SourceSKILL.md
57curl "https://api.xero.com/api.xro/2.0/BankTransactions" \
low line 65

External URL reference

SourceSKILL.md
65curl "https://api.xero.com/api.xro/2.0/Reports/ProfitAndLoss?fromDate=2024-01-01&toDate=2024-12-31" \
low line 71

External URL reference

SourceSKILL.md
71- Dashboard: https://go.xero.com
Scanned on May 23, 2026
View Security Dashboard
Installation guide →