Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed financial-close checklist skill with no executable code, persistence, credential access, or hidden data movement.
Before using this with live accounting integrations, confirm the client/entity, period, and reviewer, and require explicit approval before posting entries, locking periods, or distributing financial reports. As packaged here, it is guidance-only Markdown rather than an automation that can act on accounts by itself.
The skill explicitly instructs locking accounting periods, exporting financial statements, and distributing packages, which are impactful actions in a financial system. Without an explicit confirmation gate or warning that these steps modify records/access controls and may affect downstream reporting, an agent could perform sensitive changes prematurely or on the wrong period/entity.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
1. Automate bank feeds — eliminate manual download/import
2. Set transaction cutoff rules — no backdating without approval
3. Standardize chart of accounts — fewer coding questions = faster entry
4. Create recurring JE templates — one-click accruals, depreciation, amortization
5. Use close management software — FloQast, Blackline, or a simple Google Sheet tracker
No suspicious patterns detected.