Payroll Compliance Audit
v1.0.0Performs comprehensive payroll audits including worker classification, overtime, tax withholding accuracy, compliance checklists, and generates detailed repo...
⭐ 0· 599·0 current·0 all-time
by@1kalin
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (payroll compliance audit) match the SKILL.md content: worker classification, overtime checks, tax withholding, checklists and report templates. The skill declares no binaries, env vars, or installs — this is coherent for an instruction-only audit guide.
Instruction Scope
SKILL.md stays within payroll-audit scope and asks the user/agent for payroll context (employee counts, states, schedules, payroll provider). It does not instruct the agent to read unrelated system files or exfiltrate data. Note: the document does not include guidance for secure handling/minimization of sensitive payroll data or where to fetch 'current tables' (it assumes the agent/user supplies up-to-date figures).
Install Mechanism
No install spec and no code files — lowest-risk installation profile. Nothing is downloaded or written to disk by the skill itself.
Credentials
The skill requires no environment variables, credentials, or config paths, which is proportionate to an instruction-only audit guide. Be aware: actual operation will need sensitive payroll data (employee lists, wages, etc.) provided by the user at runtime — those are not requested as persistent credentials by the skill.
Persistence & Privilege
always is false; the skill does not request persistent presence or permissions to modify other skills or system settings. Autonomous invocation is allowed (platform default) but does not combine with other privilege escalations here.
Assessment
This skill is internally consistent and appears to be an instruction-only payroll audit guide. Before using it: (1) don't provide full payroll system credentials or live feeds to an unvetted agent—supply only the minimum data required or anonymized samples where possible; (2) verify that tax rates/thresholds used are current (SKILL.md contains 2026 figures but may become stale); (3) treat any exposure estimates as advisory and have a qualified payroll/HR/legal professional validate high-risk findings; (4) if you plan to use the external AfrexAI links or paid services, vet that provider separately. If you need the agent to access live payroll systems, require explicit, audited integration rather than pasting credentials into a chat.Like a lobster shell, security has layers — review code before you run it.
FLSAvk97a23myf1a0808nbcat8c5wc9817r3zHRvk97a23myf1a0808nbcat8c5wc9817r3zIRSvk97a23myf1a0808nbcat8c5wc9817r3zauditvk97a23myf1a0808nbcat8c5wc9817r3zcompliancevk97a23myf1a0808nbcat8c5wc9817r3zlatestvk97a23myf1a0808nbcat8c5wc9817r3zpayrollvk97a23myf1a0808nbcat8c5wc9817r3z
License
MIT-0
Free to use, modify, and redistribute. No attribution required.