Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Tax Package Preparation

v1.0.2

Year-end tax package preparation pipeline for QBO-connected clients. Generates a 9-tab Excel workbook: Tax Summary, Income, Expenses, Depreciation, 1099s, St...

0· 221·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for samledger67-dotcom/tax-package-prep.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Tax Package Preparation" (samledger67-dotcom/tax-package-prep) from ClawHub.
Skill page: https://clawhub.ai/samledger67-dotcom/tax-package-prep
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install tax-package-prep

ClawHub CLI

Package manager switcher

npx clawhub@latest install tax-package-prep
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill claims to pull full-year data from QuickBooks Online (QBO) and run python scripts (scripts/pipelines/tax-package-prep.py), but the registry metadata lists no primary credential and no required environment variables or code files. A QBO-connected pipeline legitimately needs QBO credentials and the referenced Python scripts; their absence from the declared requirements or the package is an incoherence.
Instruction Scope
SKILL.md instructs the agent/operator to read client SOPs (clients/{slug}/sop.md), scan GL memos/vendor names, and produce sensitive tax workpapers (including wallet addresses and FBAR indicators). Those actions are within the stated tax-prep purpose, but the instructions assume local data, an existing QBO auth token, and python scripts that are not included—this implicit dependency should be explicit.
Install Mechanism
There is no install spec (instruction-only), which is low-risk. The SKILL.md only suggests 'pip install openpyxl' under Requirements; that is a lightweight dependency and reasonable for producing Excel output.
!
Credentials
The runtime notes explicitly state 'QBO auth token must already be configured' and the skill will read client SOP files and financial GL data (sensitive). However, the skill metadata declares no required environment variables or primary credential. Requesting access to QBO data (and potentially other secrets) without declaring them is disproportionate and opaque.
Persistence & Privilege
The skill does not request always:true, does not install or modify system-wide settings, and is user-invocable only. There is no indication it requests persistent elevated privileges.
What to consider before installing
This skill’s instructions assume access to QuickBooks Online credentials and local Python scripts, but the package does not declare or include them. Before installing or running anything: (1) confirm the publisher/source and obtain the actual script files referenced (scripts/pipelines/tax-package-prep.py); (2) verify where and how the required QBO auth token is stored and avoid providing broad or long-lived credentials—use least-privilege tokens or a sandbox QBO account for testing; (3) inspect the actual scripts to ensure they do only the described work (no exfiltration, no unexpected network calls or shell executions); (4) ensure client SOP and GL data paths (clients/{slug}/sop.md and accounting exports) are the intended inputs and that sensitive data is handled appropriately; (5) if you cannot obtain or inspect the code and an explicit declaration of required credentials, treat this package with caution and do not run it against production data.

Like a lobster shell, security has layers — review code before you run it.

latestvk975qf7dqcxz0fg71kn7bsam5183ctc5
221downloads
0stars
3versions
Updated 22h ago
v1.0.2
MIT-0

Tax Package Preparation

Prepare a complete year-end tax package for client filing. Pulls full-year financial data from QBO, reads the client SOP for entity configuration, and generates all tax-ready schedules with IRS form mapping.

When To Use

Use when:

  • Client needs year-end tax package for CPA/tax preparer
  • Generating income/expense schedules with IRS line mapping
  • Identifying 1099 vendors (paid >$600)
  • Flagging crypto exposure (Form 8949) from SOP wallet address
  • Checking for FBAR requirement (FinCEN 114)
  • Detecting multi-state nexus risk
  • Building carryforward analysis (NOL, Sec 179, charitable)
  • Tracking year-over-year tax position changes (CDC)

NOT for:

  • Monthly close → use month-end-close.py
  • Bank reconciliation → use bank-reconciliation.py
  • P&L variance analysis → use pl-deep-analysis.py
  • Payroll tax returns (941, 940, W-2s) — separate workflow
  • Actual tax return preparation (CPA reviews all output before filing)

Quick Start

# Standard run — pulls full year from QBO
python3 scripts/pipelines/tax-package-prep.py --slug my-client --year 2025

# Skip GL drill (faster, less vendor detail)
python3 scripts/pipelines/tax-package-prep.py --slug my-client --year 2025 --skip-gl

# Custom output directory
python3 scripts/pipelines/tax-package-prep.py --slug my-client --year 2025 --out ~/Desktop/tax-2025

# QBO sandbox
python3 scripts/pipelines/tax-package-prep.py --slug my-client --year 2025 --sandbox

Requirements

pip install openpyxl
# QBO auth token must already be configured

Output: 9-Tab Excel Workbook

TabContents
Tax SummaryEntity info, key tax metrics, special flags (crypto/FBAR/vehicle/home office), SOP watch items
Income ScheduleRevenue by category with IRS Sch C / 1120 / 1065 line mapping
Expense ScheduleExpenses with IRS line mapping, 50% meal limit applied, deductible amounts
DepreciationFixed assets from GL + BS, MACRS / Section 179 / Straight-Line detection
1099 VendorsVendors paid >$600, form type (NEC/MISC), corp exemption flag, W-9 action list
State NexusMulti-state revenue/expense pattern detection, HIGH/MEDIUM/LOW risk rating
Crypto FlagForm 8949 flag, wallet address, FBAR assessment, action item checklist
ChecklistREADY / NEEDS INPUT / MISSING for every tax package item
CDC LogYear-over-year income and expense position changes

SOP Integration

The pipeline reads clients/{slug}/sop.md to auto-configure:

SOP SignalWhat It Triggers
S-Corp / 1120-SEntity = S-Corp, officer W-2 flag, K-1 checklist item
C-Corp / 1120Entity = C-Corp, E&P tracking, charitable 10% limit
Partnership / 1065K-1 prep checklist, partner basis tracking
0x[wallet] (ETH address)Crypto flag, Form 8949, wallet address in output
crypto / bitcoin / defiCrypto flag, Form 8949 required
vehicle / mileageVehicle schedule, mileage log requirement
home office / Form 8829Home office flag, sq footage action items
SAFE / convertible noteSAFE treatment watch item
foreign / offshoreFBAR flag, FinCEN 114 action
NOL / loss carryforwardCarryforward analysis
Section 179 carrySection 179 carryover check
interest expenseWatch item: verify deductibility

IRS Schedule Mapping

Expense Categories (auto-mapped)

  • Advertising → Sch C Ln 8 / 1120 Ln 22 / 1065 Ln 21a
  • Vehicle/Auto → Sch C Ln 9 (standard mileage or actual)
  • Contract Labor → Sch C Ln 11 (triggers 1099-NEC scan)
  • Depreciation → Sch C Ln 13 / Form 4562
  • Interest → Sch C Ln 16 / 1120 Ln 18
  • Legal/Professional → Sch C Ln 17
  • Wages → Sch C Ln 26 / 1120 Ln 13
  • Meals/Entertainment → Sch C Ln 24 (50% limit applied automatically)
  • Home Office → Sch C Form 8829

Income Categories (auto-mapped)

  • Service Revenue → Sch C Ln 1 / 1120 Ln 1a
  • Product Sales → Sch C Ln 1 / 1120 Ln 1a
  • Interest Income → Sch B
  • Crypto → Form 8949 / Sch D

1099 Vendor Logic

Scans all GL expense accounts and aggregates by vendor name:

  • Include: Vendors paid ≥$600 via check/ACH/wire (not credit card)
  • 1099-NEC: Contractors, consultants, attorneys, freelancers
  • 1099-MISC: Rent, royalties, medical payments
  • Exempt: C-Corps and S-Corps (except attorneys and medical providers)
  • Flag: "Inc", "Corp", "LLC" in vendor name → verify entity type
  • Deadline: January 31 (1099-NEC), January 31/March 31 (1099-MISC)

State Nexus Detection

Scans GL memos, vendor names, and account names for US state indicators:

  • HIGH risk: 5+ indicators in a state → likely nexus, recommend registration review
  • MEDIUM risk: 2-4 indicators → investigate further
  • LOW risk: 1 indicator → monitor

Physical nexus (employees, office), economic nexus ($100K revenue threshold), and payroll nexus are all flagged.

Crypto / FBAR Logic

Crypto:

  • Detects from SOP wallet address (0x... pattern) or crypto keywords in GL
  • Flags Form 8949 and Schedule D requirement
  • Detects staking (ordinary income) vs. sales (capital gains) from GL memos
  • Action list includes exchange export, cost basis calculation, software recommendation

FBAR (FinCEN 114):

  • Triggers on foreign account keywords in GL or SOP
  • FBAR threshold: $10,000 aggregate foreign account balance at any point in the year
  • Also checks Form 8938 (FATCA) thresholds
  • Deadline: April 15 with automatic extension to October 15

CDC Cache

Each run saves a snapshot to .cache/tax-package-prep/{slug}-{year}.json.
The next year's run computes year-over-year deltas for income and expense accounts.
CDC events are shown in the CDC Log tab sorted by absolute dollar change.

Depreciation Detection

Scans GL and Balance Sheet for:

  • Fixed asset account names (equipment, vehicle, computer, furniture, leasehold)
  • Accumulated depreciation account names
  • Memo keywords: "section 179", "MACRS", "bonus depreciation", "straight-line"
  • P&L depreciation expense line items

Output includes: account, year-end balance, period activity, detected method, Section 179 flag.

Estimated Tax Payments

Scans GL for estimated tax payment entries:

  • Account names: "estimated tax", "quarterly payment", "1040-es", "1120-w"
  • Memo keywords: same
  • Classifies by quarter (Q1-Q4) based on payment date
  • Flags missing quarters → client must verify with bank statements

Checklist Status Definitions

StatusMeaning
✅ READYData found in QBO — no client action needed
⚠ NEEDS INPUTRequires additional documentation from client
❌ MISSINGNot found — QBO pull failed or data doesn't exist

File Locations

  • Pipeline: scripts/pipelines/tax-package-prep.py
  • CDC Cache: .cache/tax-package-prep/{slug}-{year}.json
  • Output: ~/Desktop/TaxPackage_{slug}_{year}.xlsx (or --out dir)
  • Skill: skills/tax-package-prep/SKILL.md

Notes

  • All financial math uses Python Decimal — no float rounding errors
  • Output is for CPA/tax preparer review — not a filed return
  • Vehicle deduction: requires mileage log from client; pipeline flags but cannot calculate
  • Home office: requires square footage from client; pipeline flags Form 8829 requirement
  • Entity-specific items (K-1s, basis tracking, E&P) are flagged as checklist items, not generated
  • Carryforward amounts require prior-year return — pipeline flags for review but cannot pull from prior returns

Comments

Loading comments...