Finance Accrual Rollforward Coordinator

PassAudited by VirusTotal on May 6, 2026.

Overview

Type: OpenClaw Skill Name: finance-accrual-rollforward-coordinator Version: 1.1.0 The skill bundle is designed for coordinating finance accrual rollforwards and reconciliation tasks. The instructions in SKILL.md guide the agent to use standard OpenClaw tools like memory_search, file operations (read/write/edit), and scheduling (cron/heartbeat) in a manner consistent with its stated purpose. There are no indicators of malicious intent, data exfiltration, or unauthorized command execution.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may rely on remembered finance workflow details, paths, and escalation conventions when coordinating the rollforward.

Why it was flagged

The skill intentionally reuses persistent memory for finance tracker locations and workflow conventions. This is purpose-aligned, but stored memory can be stale or overly trusted.

Skill content
Start with `memory_search` for saved tracker paths, report paths, labels, reminder style, and owner/escalation conventions.
Recommendation

Confirm that recalled paths, owners, labels, and conventions are current before allowing edits or escalations.

What this means

Incorrect edits could affect local financial trackers, rollforward tables, or issue memos.

Why it was flagged

The skill may modify local accrual tracker or memo files and allows shell fallback. This fits the reconciliation purpose, but file mutations in finance workflows should be reviewed.

Skill content
Use `read`, `write`, and `edit` before falling back to `exec` when local file tools are enough.
Recommendation

Review target paths and diffs before accepting changes, and require a clear reason before allowing any shell command fallback.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

If requested, the agent may create reminders or scheduled agent turns that run later.

Why it was flagged

The skill can guide creation of future scheduled activity, including heartbeat or cron-style follow-ups. The instructions are bounded by the task's scheduler mode, so this is a note rather than a concern.

Skill content
Keep scheduler semantics straight: use heartbeat for periodic awareness and cron only for true exact-time follow-ups.
Recommendation

Be explicit about whether ongoing watch or exact-time follow-ups are desired, and review any scheduled jobs created for this workflow.