Security audit
Security checks across malware telemetry and agentic risk
This accounting research skill is not clearly malicious, but it requires running an unpinned external GitHub workflow and handling sensitive accounting facts without strong scoping or privacy controls.
Install only if you are comfortable reviewing and trusting the FinResearchClaw repository and its dependencies. Pin a known commit, run it without elevated privileges in an isolated environment, redact confidential client or company facts before web research, and choose a private output folder instead of ~/Downloads for sensitive memos.
Handle transaction-specific accounting questions through a fixed sequence: gather facts, confirm output format, ensure the local FinResearchClaw repo is installed and runnable, route the task through that wrapped repo/workflow, research guidance online, apply standards, and deliver the requested output. For all tasks under this skill — memo, email, and q-and-a alike — the workflow must wrap and leverage the local FinResearchClaw repo/workflow as a required research-and-drafting execution layer. This is mandatory, not optional, and applies even when the accounting issue appears straightforward. The skill may create and use a task-local virtual environment when needed to run the repo or supporting document-generation dependencies. FinResearchClaw is a required support engine for research depth and drafting quality across all output modes; authoritative accounting conclusions must still be grounded in ASC / SEC / AICPA / clearly labeled interpretive guidance. ## Prerequisites
## Runtime / Environment Expectations - Memo-mode runs are allowed to create and use a task-local Python virtual environment. - FinResearchClaw default repo path: `~/.openclaw/workspace/AutoResearchClaw` - If the repo or its dependencies are not ready, initialize a local venv for the task and install only the dependencies needed for the memo workflow. - If FinResearchClaw cannot be executed after reasonable setup attempts, disclose that explicitly and fall back to a non-FinResearchClaw path only as an exception, not the default.
65/65 vendors flagged this skill as clean.
