Crypto Tax Calc

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a reference-only crypto tax guide, with one user-noticeable note about advice to use read-only exchange API access with third-party tax software.

This skill looks appropriate as static crypto tax reference material. Before following its migration advice, remember that exchange CSV exports, wallet addresses, and API keys can reveal sensitive financial activity; use reputable tools and read-only, revocable access.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI03: Identity and Privilege Abuse

What this means

If a user follows this advice, exchange API keys or account exports could expose sensitive financial transaction data to a tax-software provider.

Why it was flagged

The skill does not request credentials for itself, but its reference guidance recommends using exchange API access with third-party tax software.

Skill content

1. Connect all exchange accounts via API ... API method: Most tax software can read directly via read-only API key

Recommendation

Use trusted tax software, create read-only API keys with the minimum needed scope, avoid sharing withdrawal/trading permissions, and revoke keys after import if they are no longer needed.