Openclaw Greek Accounting Meta
PassAudited by ClawScan on Feb 21, 2026.
Overview
This meta-skill is internally consistent with its stated role as an orchestrator: it asks for the CLI and a single data-directory env var and its runtime instructions operate on that directory and call companion skills.
This meta-skill is coherent for orchestrating an accounting stack, but take these precautions before installing: - Sanity-check OPENCLAW_DATA_DIR: point it to a single, access-controlled data root so the skill's read/write operations are confined. - Audit companion skills: the meta-skill delegates most capabilities. Inspect each dependent skill's declared env vars and install steps (they may request API keys or install binaries that can access external systems). - Confirm human-confirmation enforcement: SKILL.md promises manual approval before government submissions, but that is a runtime/process requirement. Ensure your agent runtime actually prompts a human and blocks autonomous submissions, or disable autonomous invocation for this skill if you cannot enforce manual gating. - Least privilege for credentials: store any AADE/EFKA/banking credentials in scoped, audited secrets stores and grant only the companion skills the minimal permissions needed. - Run the included verification commands in a safe test environment first (OPENCLAW_DATA_DIR pointing to a sandbox) to observe behavior, file locations, and logs before using on real client data. - Monitor logs and backups: enable auditing of /data/memory/episodes/ and /data/compliance/submissions/ so you can trace what the orchestrator does. If you want, provide the list of companion skills' SKILL.md files and I can review those for additional risks (credential requests, network endpoints, or install-time downloads).
