Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Kenya Tax Rates
v1.0.1Calculate Kenya payroll deductions - PAYE, SHIF, NSSF, Housing Levy with accurate 2024/2025 rates
⭐ 0· 1.8k·0 current·0 all-time
byEric Kariuki@enjuguna
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Kenya payroll deductions) align with the content: examples, functions, tax bands and links to an npm package and GitHub repo that implement the calculators. There are no unrelated environment variables, binaries, or config paths requested.
Instruction Scope
SKILL.md contains usage examples and API descriptions only; it does not instruct the agent to read arbitrary files, access credentials, or transmit data to unknown endpoints. The only external interactions described are installing and importing the npm package and links to npm/GitHub, which are consistent with the stated purpose.
Install Mechanism
There is no formal install spec in the skill bundle (instruction-only), but the README instructs users/agents to run `npm install kenya-tax-rates` from the public registry. Installing an npm package is a standard way to obtain this functionality, however npm installs can execute package lifecycle scripts (postinstall) and will download code from the registry — you should review the package source and publisher before installing.
Credentials
The skill declares no environment variables, credentials, or config paths. The requested inputs in examples are typical function arguments (grossSalary, pensionContribution, etc.) and are proportionate to a payroll calculator.
Persistence & Privilege
The skill does not request always:true, does not alter other skills or agent-wide configuration, and does not ask for persistent access. It's user-invocable and allows normal autonomous invocation (platform default).
Assessment
This skill appears coherent and limited to calculating Kenya payroll deductions. Before installing or running the suggested `npm install kenya-tax-rates`, verify the npm package and its GitHub repository (owner, recent commits, open issues). Inspect the package contents for any lifecycle scripts (postinstall) or unexpected network calls, prefer pinned versions, and if possible run the install in a sandboxed environment. If you rely on the calculations for payroll, cross-check the tax bands/rules against official Kenya tax guidance and your payroll policy.Like a lobster shell, security has layers — review code before you run it.
latestvk974xrk6h9gjx09jg7tnd1ndps804mex
License
MIT-0
Free to use, modify, and redistribute. No attribution required.