Norman: Financial Overview

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is coherent with its stated purpose, but it should be treated as sensitive because it retrieves business financial data through a Norman Finance MCP integration.

Before installing, make sure you trust Norman Finance and the configured norman-finance MCP server. This skill appears purpose-aligned and contains no code or persistence, but it can retrieve sensitive balances, transactions, invoices, and tax information, so use it only in appropriate private contexts.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill may cause the agent to retrieve and display sensitive business financial details in the conversation.

Why it was flagged

The skill instructs the agent to access business balance, transactions, invoices, VAT, and tax information. This is expected for a financial overview, but it is sensitive account data.

Skill content
Call `get_company_balance` ... `search_transactions` ... `list_invoices` ... `get_vat_next_report` ... `get_company_tax_statistics`
Recommendation

Install and use it only if you trust the Norman Finance integration and intend the agent to access that business account's financial data.

What this means

Financial information may pass through the configured Norman Finance MCP tooling into the agent's context.

Why it was flagged

The skill relies on an MCP integration to obtain financial data. That is purpose-aligned, but users should recognize that sensitive data is handled through the configured MCP tool boundary.

Skill content
requires:
      mcp:
        - norman-finance
Recommendation

Use a trusted MCP server/account configuration and avoid invoking the skill in conversations where sensitive financial details should not appear.

What this means

A user must rely on the registry listing and Norman Finance MCP configuration to establish trust before granting access to financial data.

Why it was flagged

The listing provides a homepage but no identified source repository/package. Since the skill touches financial data, users should verify the publisher and integration provenance, even though no code or install script is present.

Skill content
Source: unknown; Homepage: https://norman.finance
Recommendation

Confirm the skill and MCP server are from the expected Norman Finance provider before connecting or using business accounts.