upload-to-erp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited upload-to-erp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Optional final phase. Pushes the year's journal lines into an external ERP system after the user has approved the bookkeeping.
Only after the user has explicitly approved the bookkeeping (see the approval gate in the yearly-bookkeeping orchestrator skill). Do not invoke this on your own — wait for the user to ask.
settings/.env to find ERP_CONNECTOR (e.g. ERP_CONNECTOR=ofinda).python connectors/{erp}/upload.py {YYYY} as a dry-run first. Show the user what would happen.--execute. The connector will still ask for an interactive yes before any destructive call.The dry-run prints:
Bilag-fil that the connector will (or cannot) attach.If the count looks wrong, the journal is wrong, or auth fails — halt and surface the error to the user before retrying.
cd connectors/ofinda # or your ERP folder
python upload.py {YYYY} --executeBy default the script asks for an interactive yes before any POST/DELETE. Pass --yes to skip the prompt only if the user has confirmed twice in chat.
If the year has already been pushed and the user is re-uploading after changes:
python upload.py {YYYY} --execute --replaceThis deletes the existing lines on the journal first, then re-posts. Use only after the user has explicitly asked for --replace. Otherwise prefer to append.
By default, three bilag IDs are skipped — primosaldi, year-end close, presentation reclasses. The connector exposes --skip-bilag to override this list. If your numbering differs, update note{YYYY}.md with the right list and pass it through.
For Ofinda specifically, binary file upload is not supported via API as of 2026 — the public swagger only documents file metadata. The connector ends every successful run with a list of files to attach manually in the Ofinda UI per voucher. Walk the user through that list.
For other ERPs, check connectors/{erp}/README.md for whether file attachment is supported.
After a real upload, the connector prints:
Open the ERP UI, navigate to the journal, and verify:
ledger.db. The push is one-way.--replace to wipe and retry.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.