Norman: Expense report

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI03: Identity and Privilege Abuse

What this means

The agent may see transaction amounts, vendors, categories, and company balance information while preparing the report.

Why it was flagged

The skill asks the agent to use finance-account tools to retrieve transaction history and company balance data. This is expected for an expense report, but it is delegated access to sensitive financial information.

Skill content

- Call `search_transactions` for the specified period (default: last month)
- Filter for outgoing transactions (expenses only, exclude income)
- Call `get_company_balance` for current balance context

Recommendation

Install or invoke this only if you trust the Norman finance MCP connection and intend the agent to access the requested financial period and related balance context.

NoteHigh Confidence

ASI07: Insecure Inter-Agent Communication

What this means

Financial data retrieved from the MCP connector may be included in the agent's working context and final report.

Why it was flagged

The skill depends on an external MCP connector for finance data. This is disclosed and purpose-aligned, but users should understand that sensitive financial data is being exchanged through that connector.

Skill content

metadata:
  openclaw:
    homepage: https://norman.finance
    requires:
      mcp:
        - norman-finance

Recommendation

Use a trusted Norman finance MCP configuration and request the narrowest reporting period needed.