← 返回 Skills 市场

Compliance Guardian

Name: Compliance Guardian
Author: jonbarnato

作者 jonbarnato · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

总下载

当前安装

版本数

在 OpenClaw 中安装

/install compliance-guardian

功能描述

Tool for real estate agents to screen transactions, collect required FinCEN data, and track filing deadlines for residential property entity sales under FinC...

使用说明 (SKILL.md)

Compliance Guardian — FinCEN Real Estate Reporting

Tool for real estate professionals to determine FinCEN reporting requirements and prepare Real Estate Reports.

Description

The FinCEN Residential Real Estate Reporting Rule (effective March 1, 2026) requires reporting of non-financed residential property transfers to LLCs, trusts, and other entities. Compliance Guardian helps transaction coordinators and agents:

Screen transactions — Quickly determine if reporting is required
Collect data — User-friendly form for all required FinCEN fields
Track deadlines — Never miss a filing deadline

Background

Who Must Report?

The "reporting person" is typically the closing agent (title company, attorney, escrow officer). However, brokers and agents need to understand the requirements to:

Advise clients properly
Ensure compliance in their transactions
Avoid E&O exposure

What's Reportable?

A transaction requires a FinCEN Real Estate Report when ALL three conditions are met:

Residential property (1-4 units, or vacant land for residential development)
Entity/Trust buyer (LLC, corporation, partnership, or trust)
Non-financed (no regulated bank mortgage — includes cash, hard money, seller financing)

Filing Deadline

The later of:

30 calendar days after closing, OR
Last day of the month following the month of closing

Features

1. Transaction Screener

Three-question wizard:

Property type?
Buyer type?
Financing type?

Result: Clear YES/NO with explanation.

2. Form Pre-Filler

Collects all required FinCEN fields:

Reporting person — Name, title, business, contact
Property — Address, APN, closing date, consideration
Seller — Name, address
Buyer entity — Legal name, EIN, formation state
Beneficial owners — Name, DOB, address, citizenship, TIN

3. Deadline Tracker

Input closing date → calculates filing deadline
Color-coded countdown (green > 14 days, yellow > 7 days, red ≤ 7 days)
Persistent tracking of all pending filings

Usage

As Standalone Tool

Download compliance-guardian.html
Open in any web browser
No installation required

Integrated with Mission Control

Add navigation button to your Mission Control dashboard:

\x3Cbutton onclick="window.open('/compliance-guardian.html')">🛡️ FinCEN\x3C/button>

Technical Details

Single HTML file (~20KB)
No external dependencies
Mobile-responsive
Print-friendly
Data stored in localStorage (browser only)

Files

compliance-guardian/
├── SKILL.md                  # This file
└── compliance-guardian.html  # Main tool

References

FinCEN BSA E-File Portal
First American FinCEN Resources
Rule effective date: March 1, 2026

Credits

Built by KW Sacramento Metro AI Team. First compliance tool for the FinCEN Real Estate Reporting Rule.

License

MIT

安全使用建议

This tool appears to be a straightforward browser-based FinCEN reporting helper, and it does not request external credentials or installation. However: - The form collects very sensitive PII (names, DOBs, addresses, TIN/SSNs). Only enter such data if you trust where the file is served from and you understand how it will be stored and who can access it. localStorage is unencrypted and persists on the browser profile. - Before using or deploying, open the full compliance-guardian.html in a text editor and search for any network activity or obfuscated code: look for fetch(), XMLHttpRequest, navigator.sendBeacon, WebSocket, <script src=>, <img src=>, eval(), atob()/btoa(), long base64 strings, or remote URLs. If any are present, confirm their purpose and destination. - If you plan to host it with your Mission Control instance, serve it from a trusted, HTTPS origin and confirm the origin does not add third-party scripts that could read localStorage. - Consider avoiding entry of SSNs/TINs into this tool if you cannot guarantee local-only storage. If you must store highly sensitive fields, use a version enhanced for secure storage (encrypted storage, server-side vaulting) or remove those fields from local persistence. - Because the provided HTML in the review was truncated, I have medium confidence in this assessment. If you provide the complete compliance-guardian.html (full source), I can re-scan it for hidden network requests, obfuscation, or other red flags and raise the confidence of this verdict.

能力标签

cryptocan-make-purchases

能力评估

✓ Purpose & Capability

Name/description match the delivered assets: an instruction-only skill with a single HTML file that implements a screener, form pre-filler, and deadline tracker for FinCEN residential real estate reporting. Nothing requested (no env vars, no binaries, no install) is out of scope for that purpose.

ℹ Instruction Scope

SKILL.md instructs the user to download/open the single HTML file and optionally add a Mission Control navigation button; the HTML (what was visible) implements UI and saves data to browser localStorage only. This scope is appropriate for a browser-based helper, but the skill collects highly sensitive fields (names, DOB, addresses, TIN/SSN). The instructions do not describe any external transmission, but the HTML file in the prompt was truncated — the remainder may include network calls or telemetry. Verify the full file for any fetch/XHR, <img>, <script src=>, navigator.sendBeacon, eval/obfuscated code, or base64-encoded payloads before use.

✓ Install Mechanism

No install spec and no binaries requested; runtime is purely a local HTML file opened in a browser. This is minimal and proportionate.

✓ Credentials

The skill declares no required environment variables or external credentials. That aligns with the stated purpose. However, the tool requests collection of personal identifying information (including TIN/SSN) through its UI; while expected for the task, this raises data-sensitivity concerns rather than mismatched credential requests.

ℹ Persistence & Privilege

The tool persists entries in browser localStorage (per SKILL.md and visible HTML). This is expected for a client-side tracker, but localStorage is unencrypted and accessible to other scripts served from the same origin. Adding the file to Mission Control or serving it from a shared host could expose stored PII to the host origin. The skill is not marked always:true and does not require elevated agent privileges.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install compliance-guardian
安装完成后，直接呼叫该 Skill 的名称或使用 /compliance-guardian 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial publish — FinCEN compliance screening skill for real estate

元数据

Slug compliance-guardian

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题