Security audit
Security checks for vulnerabilities and agentic risk
This CFO skill is a disclosed advisory finance guide with limited local preference storage and no executable code, network access, bank connections, or money movement.
Before installing, be comfortable with the skill reading and maintaining local CFO preference/context files under ~/Clawic/data/cfo/ and reading shared profile values when needed. Do not store credentials, account numbers, tax IDs, raw bank/payroll exports, or sensitive employee/customer detail in its memory files.
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
last: YYYY-MM-DD
## Company Shape
<!-- Stage, headcount range, business model, last round if mentioned -->
## Finance Stack
<!-- Accounting, billing, payroll, expense, cap table systems in use -->
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
## Finance Stack
<!-- Accounting, billing, payroll, expense, cap table systems in use -->
<!-- Auditor, tax advisor, banks — names only, never credentials or account numbers -->
## Calendar
<!-- Fiscal year end, close timing, board meeting months, investor update date, budget kickoff -->
Output size or generation rate is not bounded. Unbounded output enables denial-of-service through resource exhaustion, log flooding, or context-window stuffing.
- Say the real thing: "We are extending runway and reviewing every contract. I would rather keep you at a lower number than replace you." Renewal dates are leverage; ask 60 days out, not on the renewal date.
- Cloud and infrastructure: right-size before renegotiating a commitment, or you lock in the waste for another year.
## Buying Time Without Cutting
Ranked by cost, cheapest first: collections push and early-pay incentives on the largest overdue balances → vendor term extension → an undrawn facility already in place → annual-prepay offers to existing customers → an insider bridge note → new debt → a structured down round. Structure taken under duress is deferred dilution with interest; price it as such.
The skill explicitly instructs the agent to read from and write to user-local files under ~/Clawic/data and ~/Clawic/profile.yaml without any explicit user notice or consent step in this setup file. Even though the stated purpose is preference loading and limited persistence, this creates a privacy and integrity risk because sensitive local context may be accessed or modified automatically, and the skill also persists conversation-derived data across sessions.
This markdown file includes a natural-language trigger phrase, 'Trigger to hedge at all,' followed by a heuristic threshold based on 'one month of net burn.' The condition is somewhat underspecified because it does not define how net burn should be measured or note exceptions, which could lead to inconsistent or overly broad application of the guidance.
No suspicious patterns detected.