xero
Integrates with Xero API for managing accounting data, including contacts, invoices, and financial reports using OAuth authentication.
Install this skill
Security score
The xero skill was audited on Feb 11, 2026 and we found 21 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 266 | 'Authorization': `Bearer ${process.env.MATON_API_KEY}` |
Fetch to external URL
| 262 | const response = await fetch( |
Access to .env file
| 266 | 'Authorization': `Bearer ${process.env.MATON_API_KEY}` |
External URL reference
| 4 | Xero API integration with managed OAuth. Manage contacts, invoices, payments, accounts, and run financial reports. Use this skill when users want to interact with Xero accounting data. For other third |
External URL reference
| 26 | req = urllib.request.Request('https://gateway.maton.ai/xero/api.xro/2.0/Contacts') |
External URL reference
| 35 | https://gateway.maton.ai/xero/{native-api-path} |
External URL reference
| 56 | 1. Sign in or create an account at [maton.ai](https://maton.ai) |
External URL reference
| 57 | 2. Go to [maton.ai/settings](https://maton.ai/settings) |
External URL reference
| 62 | Manage your Xero OAuth connections at `https://ctrl.maton.ai`. |
External URL reference
| 69 | req = urllib.request.Request('https://ctrl.maton.ai/connections?app=xero&status=ACTIVE') |
External URL reference
| 81 | req = urllib.request.Request('https://ctrl.maton.ai/connections', data=data, method='POST') |
External URL reference
| 93 | req = urllib.request.Request('https://ctrl.maton.ai/connections/{connection_id}') |
External URL reference
| 107 | "url": "https://connect.maton.ai/?session_token=...", |
External URL reference
| 121 | req = urllib.request.Request('https://ctrl.maton.ai/connections/{connection_id}', method='DELETE') |
External URL reference
| 134 | req = urllib.request.Request('https://gateway.maton.ai/xero/api.xro/2.0/Contacts') |
External URL reference
| 263 | 'https://gateway.maton.ai/xero/api.xro/2.0/Contacts', |
External URL reference
| 279 | 'https://gateway.maton.ai/xero/api.xro/2.0/Contacts', |
External URL reference
| 315 | req = urllib.request.Request('https://ctrl.maton.ai/connections') |
External URL reference
| 325 | - Correct: `https://gateway.maton.ai/xero/api.xro/2.0/Contacts` |
External URL reference
| 326 | - Incorrect: `https://gateway.maton.ai/api.xro/2.0/Contacts` |
External URL reference
| 336 | - [Maton Community](https://discord.com/invite/dBfFAcefs2) |
Install this skill with one command
/learn @openclaw/xero