한국 세금/절세 가이드

세금/절세 가이드 스킬. 10개 인텐트 라우팅(Quick Tax Check~Beginner Guide), 법제처 API+국세청 지식베이스 기반 Flash+Deep-Dive 2겹 리포트. 트리거: "세금", "절세", "연말정산", "종합소득세", "부가세", "재산세", "종부세"...

This skill appears internally consistent and informational. Before installing, verify that the 'law-search' and 'web_search' connectors (or local skills) you permit are trustworthy, since the playbook references running local law-search scripts; confirm those scripts won't execute unexpected shell commands. Remember the skill is explicit that it provides general information only (not professional tax advice) and asks for no credentials. Avoid entering highly sensitive personal data (full identity numbers, account credentials) into any conversational session; for case-specific tax decisions, consult a licensed tax professional or contact 국세청 (☎126).

Type: OpenClaw Skill Name: tax-guide Version: 1.0.0 The skill is classified as suspicious due to the potential for prompt injection or command injection via the `web_search` tool. In `playbook.md`, the agent is instructed to perform `web_search` queries that include placeholders like `[세목]` and `[연도]`. These placeholders are likely to be filled based on user input, creating a vulnerability where a malicious user could craft input that, when inserted into the search query, could exploit the `web_search` tool itself (e.g., prompt injection against the search API or shell injection if the tool executes commands without proper sanitization). While the stated purpose of the skill is benign, this mechanism introduces a significant security risk.