India Tax Helper

AdvisoryAudited by Static analysis on May 5, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your salary, TDS, interest, loan, and investment numbers may be passed to local calculator scripts and reflected back in the answer.

Why it was flagged

The skill authorizes the agent to run bundled Python calculator scripts with user-provided tax facts. The reviewed scripts are deterministic JSON/file calculators with no network calls, so this is purpose-aligned, but it is still local code execution.

Skill content
If the answer requires calculations, use the relevant script in `scripts/`.
Recommendation

Use only the bundled scripts, provide the minimum financial details needed, and review calculator output before relying on it.

What this means

The agent may access official tax pages during a session to verify rules or dates.

Why it was flagged

The skill directs the agent to use web search and fetch tools for runtime verification of tax rules. This is disclosed and aligned with avoiding stale tax advice, but it means answers may depend on external web retrieval.

Skill content
Use available web search tools (e.g. `web_search`) to query official sources ... Then fetch the selected official page
Recommendation

Prefer official Income Tax Department sources and avoid sending private financial documents or login-only tax portal data through web search.

What this means

Some calculations or source-verification workflows may fail or rely on live verification instead of the claimed bundled verified rules.

Why it was flagged

README and code reference FY-specific verified rules/source files, but those paths are not present in the provided file manifest. The scripts appear designed to fail closed when rules are absent, so this is a provenance/completeness note rather than evidence of malicious behavior.

Skill content
Rules file: `references/fy-2026-27/rules.verified.json`
Recommendation

Check that verified rules and source-manifest files are actually present and current before relying on FY-specific calculations.