Small CPA Firm

What to check before installing/using this skill: - Verify how 'automated' actions will be executed: this package provides templates and flows but does not include or declare email/calendar/portal connectors. Decide whether the agent will only draft messages for you to send, or whether you'll wire it to an email/calendar integration and provide credentials. - Confirm data handling and privacy: the skill will operate on client PII (SSNs, tax data). Ensure any connectors or storage you attach use strong access controls, encryption, and that you have client consent and retention policies. - Reconcile metadata and provenance: registry metadata lists version 2.0.0 but the included _meta.json says 1.0.0 and the source/homepage are effectively unknown. If you rely on this in production, ask the provider for an authoritative source, changelog, and who maintains updates. - Test with dummy data first: run the flows on non-sensitive sample clients to confirm exactly what the skill drafts, what it sends (if any), and where logs/outputs go. - Least privilege: when you connect mail, calendar, or portals, give the minimum scopes needed (send only to/from a dedicated account or use a relay), and rotate tokens if you later remove the integration. - Vet the vendor link/offer: the SKILL.md promotes a third-party setup service (ClawReady / Calendly). Treat that as a separate commercial vendor request — verify the vendor independently before following links or sharing credentials. If you want, I can extract the places where the SKILL.md implies external integrations and produce a short checklist of the credentials and scopes you'd need to enable full automation (email SMTP/API, calendar, client portal storage, etc.).