Technical Accounting Research Skill

Research technical accounting treatment and financial statement disclosure for specific transactions using U.S. GAAP and SEC-focused sources. Use when a user...

This skill appears coherent for producing researched accounting memoranda, but before installing or enabling it: 1) Review the external FinResearchClaw repository (https://github.com/ChipmunkRPA/FinResearchClaw) since the SKILL.md requires running it locally — any code there could execute on your machine. 2) Only clone and run that repo from a trustworthy location and inspect its code and dependencies. 3) Be aware the skill will perform web searches and include public SEC examples; that’s expected behavior for this use-case. 4) Note the skill will, by default, create DOCX files in ~/Downloads unless instructed otherwise — ensure that location is appropriate and does not overwrite sensitive files. 5) If you have strict security constraints, restrict autonomous invocation until you’ve audited FinResearchClaw and the python scripts used to generate output.

Type: OpenClaw Skill Name: technical-accounting-research-skill Version: 0.0.0-auto The skill bundle is classified as suspicious primarily due to its mandatory requirement to clone and execute code from an external GitHub repository (https://github.com/ChipmunkRPA/FinResearchClaw) as a core 'execution layer' (SKILL.md, README.md). While the included Python script (scripts/build_accounting_report_docx.py) is a benign utility for generating DOCX files, the instructions force the agent to perform high-risk supply chain actions, including git cloning and installing dependencies from an unvetted source. This pattern introduces a significant risk of remote code execution or data exfiltration if the external repository contains malicious logic, despite the stated purpose of technical accounting research.