account-opening-compliance

The skill’s footprint is coherent with its stated purpose of embedding CIP/KYC/OFAC, beneficial ownership, suitability, and senior-investor protections into account opening. It emphasizes robust governance, auditability, and vendor-management rather than implementing unduly intrusive data flows or autonomous destructive actions. The primary security considerations relate to data protection of highly sensitive identifiers, access controls around exception paths and enhanced-review workflows, and ensuring secure, verifiable integrations with external screening vendors. Overall, the skill is BENIGN with MEDIUM risk traits due to data sensitivity and vendor integrations; treat as SUSPICIOUS only if controls around data handling, vendor access, or access governance are unclear or poorly documented in practice.