Skillv0.1.0

ClawScan security

Greek Individual Taxes · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignFeb 21, 2026, 6:42 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: The skill is internally coherent: it prepares Greek E1 tax data from local files, needs only jq and an OPENCLAW_DATA_DIR path, and does not request external credentials or perform installs.
Guidance: This skill appears coherent for preparing Greek individual tax returns from local files, but it will read sensitive personal tax data from OPENCLAW_DATA_DIR—only put intended tax files there and avoid storing unrelated secrets in that directory. Confirm how the separate greek-compliance-aade skill handles electronic submission before enabling it (check whether that skill requires AADE credentials or network access). Review generated TAXIS/E1 output paths and permissions so files aren't exposed to other users or services. If you want extra assurance, request the skill author/publishers provide the concrete runtime commands the agent will run on your files (or a sample run on redacted data) and confirm no automatic network submission is performed by this skill itself.

Purpose & Capability: okName/description match the declared requirements: the skill is an instruction-only E1/ENFIA preparer and only asks for jq (to process JSON) and OPENCLAW_DATA_DIR (where local tax files live). There are no unrelated credentials or binaries requested.
Instruction Scope: noteSKILL.md instructs the agent to read and transform local tax data into E1/TAXIS formats and provides many example input JSONs (EVALS.json). It does not instruct arbitrary system scans or external network exfiltration, but it will access potentially sensitive local files (taxpayer names, AFM/tax IDs, addresses, incomes). The doc references AADE/TAXIS submission but states submission is performed by a separate skill with human approval — verify that workflow before enabling submission.
Install Mechanism: okNo install spec or downloads; instruction-only skill (lowest install risk). The SKILL.md suggests installing jq via the platform package manager if missing, which is a standard system command and not part of an automated install spec.
Credentials: okOnly OPENCLAW_DATA_DIR is required (a local path for data). That is proportionate to a skill that reads local tax documents. No API keys, tokens, or other secrets are requested.
Persistence & Privilege: okalways is false and the skill does not request system-wide configuration or persistent privileges. It does not claim to modify other skills or global agent settings.