taxclaw
Facilitates local extraction, storage, and export of tax documents using AI, ensuring privacy and security for sensitive data.
Install this skill
Security score
The taxclaw skill was audited on Feb 28, 2026 and we found 11 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Access to hidden dotfiles in home directory
| 22 | | **Write filesystem** | Stores extracted data at `~/.local/share/taxclaw/` and config at `~/.config/taxclaw/` | Required | |
Access to hidden dotfiles in home directory
| 41 | bash ~/.openclaw/workspace/skills/taxclaw/setup.sh |
Access to hidden dotfiles in home directory
| 47 | - `~/.config/taxclaw/config.yaml` |
Access to hidden dotfiles in home directory
| 54 | bash ~/.openclaw/workspace/skills/taxclaw/start.sh |
Access to hidden dotfiles in home directory
| 62 | ~/.openclaw/workspace/skills/taxclaw/bin/taxclaw \ |
Access to hidden dotfiles in home directory
| 66 | ~/.openclaw/workspace/skills/taxclaw/bin/taxclaw list |
Access to hidden dotfiles in home directory
| 69 | ~/.openclaw/workspace/skills/taxclaw/bin/taxclaw export --id <doc-id> |
Access to hidden dotfiles in home directory
| 72 | ~/.openclaw/workspace/skills/taxclaw/bin/taxclaw export --id <doc-id> --format long |
Access to hidden dotfiles in home directory
| 75 | ~/.openclaw/workspace/skills/taxclaw/bin/taxclaw export --id <doc-id> --format json |
Access to hidden dotfiles in home directory
| 78 | ~/.openclaw/workspace/skills/taxclaw/bin/taxclaw serve |
External URL reference
| 55 | # Open: http://localhost:8421 |
Install this skill with one command
/learn @openclaw/taxclaw