nfeio-node-sdk
nfeio-node-sdk is a Payments & billing integration skill for AI agents, published by nfe in the client-nodejs repository on GitHub. Skillspace rates nfeio-node-sdk C (72/100) and the safety scan flagged it for review; the rating is based on static analysis only.
Flagged for review. Read the source before running it.
NFE.io Node.js SDK integration expert (package: nfe-io). MUST trigger when: code imports 'nfe-io' or references NfeClient; user mentions NFE.io, NFS-e, NF-e, CT-e, CF-e, CFe-SAT, nota fiscal, nota fiscal eletronica, Brazilian invoice, fiscal document, electronic invoice Brazil, CNPJ lookup, CPF lookup, service invoice, product invoice, transportation invoice, consumer invoice, tax calculation Brazilian taxes, SEFAZ, NFE API, emissao de nota, consulta CNPJ, consulta CPF, consulta CEP; user works with Brazilian electronic fiscal documents, tax documents, or Brazilian tax compliance; any file contains 'nfe-io' in package.json or import statements; user mentions polling for invoice status, invoice async processing, or certificate management for Brazilian fiscal documents. Covers all 16 SDK resources, async invoice processing with polling, discriminated union responses, error hierarchy, certificate management, webhook signature validation, address lookup (CEP), legal entity and natural…
- Grade
- C
- Quality
- 72 / 100
- Safety
- Needs review
- GitHub stars
- 139
Unproven: rated by static analysis only, not yet compared head-to-head.
This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.
Our review
- Architecture
- 95 / 100
- Maturity
- Structured: ships references or scripts
- Security scan
- Medium-risk patterns
- License
- Not declared. Check the repository before reusing it.
- Adoption
- Adopted by 0 other repositories, in 0 collections
- Scope
- Vendor-specific: built around one product. Integrating the public NFE.io Node SDK for Brazilian fiscal documents
What the scanner flagged
- reads environment variables
- suspicious outbound endpoint
- mentions secrets in text
Not checked yet
- Not judged on the rubric yet (not a contender in its category)
- No blind task eval yet
- Sibling files (scripts, references) not fetched; security scan covers SKILL.md only
Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.