bank-statement-ocr-and-account-reconciliation

Facilitates bank statement OCR and account reconciliation using AgentPMT's external API for seamless financial operations.

Install this skill

40/100

Security score

The bank-statement-ocr-and-account-reconciliation skill was audited on May 14, 2026 and we found 32 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 118

Curl to non-GitHub URL

SourceSKILL.md

118	curl -s -X POST https://www.agentpmt.com/api/external/agentaddress \

medium line 123

Curl to non-GitHub URL

SourceSKILL.md

123	curl -s -X POST https://www.agentpmt.com/api/external/auth/session \

medium line 128

Curl to non-GitHub URL

SourceSKILL.md

128	curl -s -X POST https://www.agentpmt.com/api/external/workflows/69916466aa85db8efed1342f/fetch \

medium line 138

Curl to non-GitHub URL

SourceSKILL.md

138	curl -s -X POST https://www.agentpmt.com/api/external/workflows/69916466aa85db8efed1342f/start \

medium line 148

Curl to non-GitHub URL

SourceSKILL.md

148	curl -s -X POST https://www.agentpmt.com/api/external/workflows/active \

medium line 158

Curl to non-GitHub URL

SourceSKILL.md

158	curl -s -X POST https://www.agentpmt.com/api/external/workflows/69916466aa85db8efed1342f/end \

medium line 30

Webhook reference - potential data exfiltration

SourceSKILL.md

30	- Technical operations: network tools, encryption/decryption, Python sandboxes, webhook HTTP requests, FTP/SSH/MQTT bridges

low line 4

External URL reference

SourceSKILL.md

4	homepage: https://www.agentpmt.com/external-agent-api

low line 5

External URL reference

SourceSKILL.md

5	metadata: {"openclaw":{"homepage":"https://www.agentpmt.com/external-agent-api"}}

low line 12

External URL reference

SourceSKILL.md

12	Always use public endpoints at https://www.agentpmt.com/api/external/...

low line 48

External URL reference

SourceSKILL.md

48	2. If no wallet is available, create one with POST https://www.agentpmt.com/api/external/agentaddress

low line 53

External URL reference

SourceSKILL.md

53	1. Request a session nonce with POST https://www.agentpmt.com/api/external/auth/session and wallet_address.

low line 75

External URL reference

SourceSKILL.md

75	3. Start purchase: POST https://www.agentpmt.com/api/external/credits/purchase

low line 82

External URL reference

SourceSKILL.md

82	6. Confirm credits were posted to that same wallet by calling signed POST https://www.agentpmt.com/api/external/credits/balance.

low line 86

External URL reference

SourceSKILL.md

86	1. POST https://www.agentpmt.com/api/external/jobs/list (signed)

low line 87

External URL reference

SourceSKILL.md

87	2. POST https://www.agentpmt.com/api/external/jobs/{job_id}/reserve (signed)

low line 89

External URL reference

SourceSKILL.md

89	4. POST https://www.agentpmt.com/api/external/jobs/{job_id}/complete (signed)

low line 90

External URL reference

SourceSKILL.md

90	5. Poll POST https://www.agentpmt.com/api/external/jobs/{job_id}/status (signed)

low line 91

External URL reference

SourceSKILL.md

91	6. Confirm credited balance with signed POST https://www.agentpmt.com/api/external/credits/balance

low line 100

External URL reference

SourceSKILL.md

100	1. Optional discovery: GET https://www.agentpmt.com/api/external/workflows

low line 101

External URL reference

SourceSKILL.md

101	2. Fetch workflow: POST https://www.agentpmt.com/api/external/workflows/69916466aa85db8efed1342f/fetch

low line 102

External URL reference

SourceSKILL.md

102	3. Start workflow session: POST https://www.agentpmt.com/api/external/workflows/69916466aa85db8efed1342f/start

low line 103

External URL reference

SourceSKILL.md

103	4. Check active session: POST https://www.agentpmt.com/api/external/workflows/active

low line 104

External URL reference

SourceSKILL.md

104	5. End workflow session: POST https://www.agentpmt.com/api/external/workflows/69916466aa85db8efed1342f/end

low line 118

External URL reference

SourceSKILL.md

118	curl -s -X POST https://www.agentpmt.com/api/external/agentaddress \

low line 123

External URL reference

SourceSKILL.md

123	curl -s -X POST https://www.agentpmt.com/api/external/auth/session \

low line 128

External URL reference

SourceSKILL.md

128	curl -s -X POST https://www.agentpmt.com/api/external/workflows/69916466aa85db8efed1342f/fetch \

low line 138

External URL reference

SourceSKILL.md

138	curl -s -X POST https://www.agentpmt.com/api/external/workflows/69916466aa85db8efed1342f/start \

low line 148

External URL reference

SourceSKILL.md

148	curl -s -X POST https://www.agentpmt.com/api/external/workflows/active \

low line 158

External URL reference

SourceSKILL.md

158	curl -s -X POST https://www.agentpmt.com/api/external/workflows/69916466aa85db8efed1342f/end \

low line 176

External URL reference

SourceSKILL.md

176	SERVER = "https://www.agentpmt.com"

low line 263

External URL reference

SourceSKILL.md

263	- API documentation: https://www.agentpmt.com/external-agent-api

Scanned on May 14, 2026

View Security Dashboard

Installation guide →

Rate this skill

Categoryfinance accounting

UpdatedJune 15, 2026

openclaw api accountant financial-analyst business-development finance accounting sales

AgentPMT/agent-skills