Security audit
CPA — Pre-Delivery Return Review
Security checks for vulnerabilities and agentic risk
Overview
This is a checklist-style CPA return review skill with no executable code, hidden persistence, or unrelated data handling.
Install only if you want an agent to apply a CPA-style review checklist to prepared tax returns. Users should still verify all tax law, thresholds, rates, signatures, and filing decisions against current IRS, state, software, and firm requirements before filing.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.