Norman: Accounting Monthly Reconciliation

ReviewAudited by ClawScan on May 10, 2026.

Overview

This instruction-only skill is coherent for monthly bookkeeping, but it can read and change financial records and trigger tax/reporting actions, so users should approve each step carefully.

Before using this skill, make sure you trust the Norman Finance MCP and are working in the correct company/account. Treat confirmations seriously: review categories, verified transactions, invoice links, overdue reminders, receipt uploads, and any tax-report preview before approving changes or submission.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A wrong approval could alter bookkeeping records, link the wrong payment or invoice, or submit an incorrect tax report.

Why it was flagged

The skill instructs the agent to use tools that can change accounting records and submit a tax report. This is expected for monthly reconciliation and the instructions require confirmation, but the actions are financially significant.

Skill content
Use `categorize_transaction`... verify each one using `change_transaction_verification`... Use `link_transaction`... Only submit with explicit user confirmation via `submit_tax_report`
Recommendation

Confirm the month, account, categories, invoice matches, and tax preview before allowing any modifying or submission tool call.

What this means

The agent may be able to view and modify sensitive business finance data through the connected Norman Finance account.

Why it was flagged

The skill depends on a finance MCP integration, implying delegated access to the user's Norman Finance account. This is aligned with the stated purpose but should be treated as privileged account access.

Skill content
requires:\n      mcp:\n        - norman-finance
Recommendation

Use this only with the intended Norman Finance workspace and ensure the MCP permissions match what you are comfortable granting.

What this means

The safety of actual finance operations depends partly on the external Norman Finance MCP, not just this SKILL.md file.

Why it was flagged

The provided artifact is instruction-only and does not include the Norman Finance MCP implementation, so the external tool provider and its permissions are not reviewable from this skill package alone.

Skill content
metadata:\n  openclaw:\n    homepage: https://norman.finance\n    requires:\n      mcp:\n        - norman-finance
Recommendation

Install or enable the Norman Finance MCP only from a trusted source and review its own permissions and provenance separately.