Working Capital Optimizer

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This instruction-only finance skill appears aligned with working-capital analysis; it asks for sensitive company financial inputs but shows no code, installs, credentials, or automated account actions.

This skill looks safe to install as an instruction-only analysis aid. Before using it, be mindful that the inputs are confidential business records; provide only the data needed for the analysis and have a qualified finance professional review any recommendations before acting on them.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI06: Memory and Context Poisoning
Low
What this means

Using the skill may place confidential cash-flow, receivables, payables, inventory, and supplier information into the agent conversation.

Why it was flagged

The skill asks the agent to work with detailed internal company financial data. This is necessary for working-capital analysis, but it is sensitive business context that users should provide intentionally and avoid reusing or sharing outside the task.

Skill content
Collect from financial statements or QBO export: ... Accounts Receivable balance ... Inventory balance ... Accounts Payable balance ... Revenue ... COGS ... AR Aging Report ... AP Aging Report ... Key supplier names and terms
Recommendation

Use the minimum necessary data, anonymize customer or supplier names where possible, and verify the agent platform’s retention and sharing settings before providing confidential financial reports.