Crypto Tax Calc

• Analyzed: May 11, 2026, 6:04 AM
• Findings: 0
• Version: 3.0.0
• Hash: 5e7ae174ed396b870095657e23a5087b50a70ae162a9300b55874fc32f74ac3f
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: crypto-tax-calc Version: 3.0.0 The skill is a purely informational reference tool for cryptocurrency taxation. The bash script (scripts/script.sh) contains only static text documentation delivered via heredocs and lacks any network access, file system modifications, or credential handling, aligning perfectly with the descriptions in SKILL.md.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI03: Identity and Privilege Abuse

Note

What this means

If a user follows this advice, exchange API keys or account exports could expose sensitive financial transaction data to a tax-software provider.

Why it was flagged

The skill does not request credentials for itself, but its reference guidance recommends using exchange API access with third-party tax software.

Skill content

1. Connect all exchange accounts via API ... API method: Most tax software can read directly via read-only API key

Recommendation

Use trusted tax software, create read-only API keys with the minimum needed scope, avoid sharing withdrawal/trading permissions, and revoke keys after import if they are no longer needed.