QBO to Tax Bridge
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This instruction-only tax mapping skill appears coherent and user-directed, but it involves sensitive QuickBooks and tax records and should be used with professional review.
Before installing, consider that you may be sharing sensitive QuickBooks, tax, and crypto transaction information. Use this as a workpaper and mapping assistant, not as a final tax authority, and have a qualified CPA, EA, or tax professional review filing positions.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user may provide detailed financial records to the agent while preparing tax workpapers.
These QBO exports can contain sensitive business financial and tax information. The workflow is user-directed and purpose-aligned, but users should confirm they are authorized to share and process the data.
Also export: **Profit & Loss (by month)** and **Balance Sheet (year-end)**
Use only with QBO data you are authorized to process, share the minimum necessary reports, and remove unrelated sensitive details where possible.
A user could over-rely on the skill’s tax mappings or workpapers when making filing decisions.
The skill presents tax guidance with an authority-framed claim while also limiting its role. This is not deceptive on its face, but users should not treat the output as a substitute for qualified tax review.
PTIN-backed advisory context included... NOT for: filing tax returns directly, providing legal tax advice, replacing a licensed CPA or EA review
Treat the skill as a preparation aid and verify mappings, deductions, crypto cost basis treatment, and filing positions with current IRS guidance or a licensed professional.