GL importer
ReviewAudited by ClawScan on May 10, 2026.
Overview
This instruction-only skill appears aligned with importing accounting spreadsheets through Synder, but it handles sensitive financial files and can make live changes to QuickBooks Online or Xero.
Use this skill only when you intend to import accounting data through Synder. Start with dryRun=true, inspect the proposed mapping, confirm the target company and entity, and only then approve a live import. Treat the API token and uploaded spreadsheets as sensitive financial data.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Anyone using the token through the agent may be able to act on connected Synder/QBO/Xero companies within that token's scope.
The skill requires a bearer token for an account connected to accounting providers, which is expected for this integration but grants meaningful delegated authority.
apiKeys:
- name: IMPORTER_API_TOKEN
description: Bearer token for the Synder Importer API.Use a dedicated or least-privilege Synder token if available, test with a sandbox company first, and revoke the token when no longer needed.
A mistaken live import could create incorrect invoices, bills, journal entries, customers, vendors, or other accounting records.
The documented workflow includes a live import action that can write accounting data. This is purpose-aligned and disclosed, but high-impact if used with the wrong file, company, entity, or mapping.
`dryRun=false`: Maps AND imports in one call.
Always run dryRun=true first, review the proposed mapping and target company/entity, and require explicit user approval before any live import.
Financial spreadsheets and import metadata leave the local environment and are processed by Synder and the connected accounting provider.
The skill discloses that sensitive accounting files are sent to a third-party service and then to QBO/Xero. This is expected for the stated purpose, but users should notice the data boundary.
CSV/XLSX files containing accounting data ... are uploaded to importer.synder.com and forwarded to your connected accounting provider
Upload only intended files, avoid unnecessary sensitive columns, confirm your organization approves Synder for this data, and review retention/account-history settings.