taxclaw
Facilitates local extraction, storage, and export of tax documents using AI, ensuring privacy and security for sensitive data.
Install this skill
or
81/100
Security score
The taxclaw skill was audited on Feb 28, 2026 and we found 11 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 22
Access to hidden dotfiles in home directory
SourceSKILL.md
| 22 | | **Write filesystem** | Stores extracted data at `~/.local/share/taxclaw/` and config at `~/.config/taxclaw/` | Required | |
low line 41
Access to hidden dotfiles in home directory
SourceSKILL.md
| 41 | bash ~/.openclaw/workspace/skills/taxclaw/setup.sh |
medium line 47
Access to hidden dotfiles in home directory
SourceSKILL.md
| 47 | - `~/.config/taxclaw/config.yaml` |
low line 54
Access to hidden dotfiles in home directory
SourceSKILL.md
| 54 | bash ~/.openclaw/workspace/skills/taxclaw/start.sh |
low line 62
Access to hidden dotfiles in home directory
SourceSKILL.md
| 62 | ~/.openclaw/workspace/skills/taxclaw/bin/taxclaw \ |
low line 66
Access to hidden dotfiles in home directory
SourceSKILL.md
| 66 | ~/.openclaw/workspace/skills/taxclaw/bin/taxclaw list |
low line 69
Access to hidden dotfiles in home directory
SourceSKILL.md
| 69 | ~/.openclaw/workspace/skills/taxclaw/bin/taxclaw export --id <doc-id> |
low line 72
Access to hidden dotfiles in home directory
SourceSKILL.md
| 72 | ~/.openclaw/workspace/skills/taxclaw/bin/taxclaw export --id <doc-id> --format long |
low line 75
Access to hidden dotfiles in home directory
SourceSKILL.md
| 75 | ~/.openclaw/workspace/skills/taxclaw/bin/taxclaw export --id <doc-id> --format json |
low line 78
Access to hidden dotfiles in home directory
SourceSKILL.md
| 78 | ~/.openclaw/workspace/skills/taxclaw/bin/taxclaw serve |
low line 55
External URL reference
SourceSKILL.md
| 55 | # Open: http://localhost:8421 |
Scanned on Feb 28, 2026
View Security Dashboard