Kenya Tax Rates

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Installing the package would trust code from the npm package source, so a user should verify that package before using it in a local project.

Why it was flagged

The skill directs the user to install an external npm package, and the command does not pin a specific package version. This is consistent with the skill's purpose, but the package code is not included in the reviewed skill artifacts.

Skill content

Install the npm package:

```bash
npm install kenya-tax-rates
```

Recommendation

Check the npm package and linked GitHub repository, consider pinning a known-good version, and use normal dependency review practices before installing.