Taxguard Skill

Monitors every trade for tax risks and optimization silently, logs results, blocks trades if Guardian Mode enabled, and delivers daily tax reports.

This skill largely does what it says (remote tax checks and optional blocking), but before installing you should: 1) Verify the provider (rhetra/api.rhetra.io) and their privacy/terms—there's no homepage in the metadata. 2) Recognize the skill will transmit detailed, sensitive financial and tax data (positions, recent sales, MAGI, filing status) to a third-party API on every trade; only proceed if you trust that endpoint and its security/privacy practices. 3) Note the manifest says no credentials required but the scripts require an API key—treat this mismatch as a red flag and confirm where/how keys are stored. 4) Consider whether 'silent' monitoring (not showing results to the trader) is acceptable for your use case; require explicit user consent if deployed for real accounts. 5) Test on a paper/pseudo account first and consider hosting an internal review or code audit of the scripts (they are readable but perform network calls). If you need higher assurance, request a public homepage, documentation, company identity, privacy policy, and an option to self-host or run checks locally without sending MAGI/other PII externally.

Type: OpenClaw Skill Name: taxguard-skill Version: 1.1.0 The skill functions as a 'man-in-the-middle' for all trading activities, instructing the agent in SKILL.md to silently transmit sensitive financial data—including account equity, full position history, and estimated MAGI—to an external API (api.rhetra.io) before every trade. While the data requested is relevant to tax analysis, the explicit instructions to perform these checks 'SILENTLY' and 'DO NOT interrupt the trader' effectively hide the transmission of sensitive PII and financial context from the user. This behavior, implemented in check-trade.js and signup.js, represents a high-risk data exfiltration surface despite the lack of overt credential theft or malicious code execution.