Tax Professional

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only tax helper is purpose-aligned, but it asks to read and store sensitive tax and expense information in workspace files.

This appears safe to install as an instruction-only tax assistant. Before using it, understand that it may read USER.md and write tax/expense records under data/tax-professional/. Keep sensitive identifiers out of those files when possible, review all logged expenses and year-end summaries, be cautious with cross-skill integrations, and verify important tax decisions with official guidance or a licensed professional.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill may modify local tax records, so incorrect entries could affect later summaries or tax-prep outputs.

Why it was flagged

The skill instructs the agent to create or update local tax-tracking records. This is expected for an expense tracker and is scoped to a specific workspace path.

Skill content
Track expenses — Log deductible expenses to `data/tax-professional/YYYY-expenses.json`
Recommendation

Review and approve logged expenses, keep receipts separately, and verify year-end summaries before using them for tax filing.

What this means

Personal tax details and expense history may remain in the workspace and be available to future sessions or summaries.

Why it was flagged

The skill uses persistent user context and stores financial/tax data. This is purpose-aligned, but the data is sensitive and may be reused in future tax interactions.

Skill content
**First:** Read `USER.md` for the user's employment type, location, filing status, and personal context. ... Store expenses in workspace: `data/tax-professional/YYYY-expenses.json`
Recommendation

Avoid storing unnecessary sensitive identifiers such as SSNs, bank account numbers, or full receipt images unless needed; periodically review or delete stored tax data.

What this means

If used with other skills, financial context could be shared beyond the tax tracker.

Why it was flagged

The skill contemplates cross-skill integration, but the artifact does not detail what tax or expense data would be shared. The integration concept is disclosed and purpose-aligned, so this is a notice rather than a concern.

Skill content
Integration — Connect with mechanic, card-optimizer, and other skills
Recommendation

Only allow cross-skill use when it is relevant, and confirm what expense or tax details will be shared.

What this means

Users may over-rely on generated tax guidance for complex filings or audit-sensitive deductions.

Why it was flagged

The wording makes a strong professional-advice claim. It fits the skill's purpose, but users should not treat it as a substitute for a licensed tax professional.

Skill content
provide CPA-level guidance ... Your CPA in the pocket
Recommendation

Use the skill for organization and planning, but verify important or unusual tax positions with current IRS guidance or a qualified tax professional.