Security audit
geneva-tax-advisor
Security checks for vulnerabilities and agentic risk
Overview
The skill is an instruction-only Geneva tax filing guide whose requested resources and behavior match its stated purpose; it does not request credentials, install software, or contain code — but it will ask for sensitive financial documents as part of normal operation.
This skill appears coherent and instruction-only, but it will ask you to provide sensitive tax documents (salary certificates, bank statements, mortgage/amortization tables, insurer attestations, crypto holdings). Before sharing anything: (1) confirm you only provide the specific documents requested and redact unnecessary personal details where possible (e.g., ID/passport numbers if not required); (2) avoid sharing live credentials (online banking usernames/passwords) — the skill doesn't need them; (3) verify referenced links/domains yourself (the SKILL references ictax.admin.ch, ge.ch, fidinam.com; one mention of getax.ch looks like a possible typo — confirm the correct GeTax guide URL); (4) ask the agent how it handles and stores uploaded documents and whether it sends them to external services; and (5) if you have any doubt about privacy, consider giving summarized/partial data rather than full documents. Overall the skill is internally consistent and does not request unexplained access, but treat all personal financial documents cautiously.
SkillSpector findings are pending for this release.