Crypto Tax Calc
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
What this means
If a user follows this advice, exchange API keys or account exports could expose sensitive financial transaction data to a tax-software provider.
Why it was flagged
The skill does not request credentials for itself, but its reference guidance recommends using exchange API access with third-party tax software.
Skill content
1. Connect all exchange accounts via API ... API method: Most tax software can read directly via read-only API key
Recommendation
Use trusted tax software, create read-only API keys with the minimum needed scope, avoid sharing withdrawal/trading permissions, and revoke keys after import if they are no longer needed.