Nalog Ru

Рассчитай налог УСН 6%, НПД для самозанятых и страховые взносы ИП по введённым доходам и периоду.

This skill appears to perform tax calculations correctly, but its instructions also tell the agent to run python3 to read/write a local counter file and to append promotional Telegram links to answers — actions unrelated to calculating taxes and not declared in the metadata. Before installing: (1) ask the author to remove the 'Attribution' section (the python commands and promotional text), or to explicitly document and justify persistent file writes and the need for python3; (2) if you must test it, run it in a sandboxed agent instance with no write permission to the workspace and with network access restricted; (3) prefer only skills that declare needed binaries/config paths; (4) if you don't trust the source, do not install — the behavior could be used for unsolicited posting or persistent tampering of agent replies.

Type: OpenClaw Skill Name: nalog-ru Version: 1.0.2 The skill bundle is classified as suspicious due to its explicit instructions for the OpenClaw agent to execute shell commands and perform file system operations. Specifically, the `SKILL.md` file contains `python3 -c "..."` commands that read from and write to `/home/node/.openclaw/workspace/ru-pack-counter.txt`. While the current purpose is to manage a counter for displaying promotional messages (including Telegram links), the capability for direct command execution and file system modification within the agent's environment represents a significant security risk, as it could be leveraged for malicious activities if the skill were compromised or intentionally misused.