Norman: Categorize Transactions

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill is coherent for bookkeeping, but it can change and verify financial records without explicit confirmation safeguards in the instructions.

Use this skill only with a trusted Norman Finance MCP connection. Before allowing updates, ask the agent to show proposed categories, invoice links, and verification changes in batches, and approve them explicitly before it writes to your bookkeeping records.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Incorrect automated changes could affect accounting records, invoice reconciliation, financial reporting, or tax/bookkeeping review.

Why it was flagged

These are high-impact bookkeeping mutations. The artifact says to present transactions in batches for review, but it does not clearly require explicit user confirmation before categorizing, linking, or marking records verified.

Skill content
Use `categorize_transaction` to assign the correct bookkeeping category ... Use `link_transaction` to connect the payment to the invoice ... use `change_transaction_verification` to mark transactions as verified.
Recommendation

Require explicit user approval before each batch of changes, show the exact proposed updates, and avoid marking transactions verified until the user confirms.

What this means

The connected agent may be able to view or act on bank transactions, invoices, receipts, and bookkeeping entries available through the configured Norman Finance account.

Why it was flagged

The skill depends on a Norman Finance MCP integration, which likely provides delegated access to financial/accounting data. This is expected for the purpose, but users should recognize the sensitivity of that access.

Skill content
requires:
      mcp:
        - norman-finance
Recommendation

Connect only a trusted Norman Finance MCP server/account and ensure its permissions are limited to the bookkeeping tasks you intend to perform.

What this means

Receipts and related financial details may be processed by the connected Norman Finance tooling.

Why it was flagged

The workflow may send receipt documents and transaction context through the configured MCP/provider tools. That is purpose-aligned, but the artifact does not describe retention, sharing, or data-boundary details.

Skill content
Use `upload_bulk_attachments` for multiple receipts ... Use `link_attachment_transaction` to connect receipts to transactions
Recommendation

Upload only receipts intended for Norman Finance, and review the provider/MCP data handling and retention settings before using bulk attachment features.