Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add guoliang1114-boop/AriaAI --skill tax-risk-management-frameworkgit clone --depth 1 https://github.com/guoliang1114-boop/AriaAIWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/guoliang1114-boop/ariaai/tax-risk-management-framework)<a href="https://agentmods.dev/skills/guoliang1114-boop/ariaai/tax-risk-management-framework"><img src="https://agentmods.dev/badge/skills/guoliang1114-boop/ariaai/tax-risk-management-framework/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/guoliang1114-boop/ariaai/tax-risk-management-framework"><img src="https://agentmods.dev/badge/skills/guoliang1114-boop/ariaai/tax-risk-management-framework.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00033 | $0.02221 |
| Opus 5 | $0.00016 | $0.01111 |
| Sonnet 5 | $0.00007 | $0.00444 |
| Haiku 4.5 | $0.00003 | $0.00222 |
Grade A, and why
tax-risk-management-framework scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 213 lines — stays where its author put it; the contents beside it link to each section on GitHub.
税务风险管理框架
When To Use
- 企业需要建立或完善税务风险管理体系
- 税务风险事件发生后的体系性反思与改进
- 集团总部对下属企业的税务风险管控
- IPO/并购前的税务风险全面排查
- COSO ERM框架下的税务风险管理模块设计
Tools
- COSO ERM框架评估工具
- 税务风险矩阵模板
- 关键风险指标（KRI）设计工具
- 税务风险自评问卷
- 税务稽查案例库
Framework
COSO ERM框架（2017修订版）整合税务风险
五大组成部分：
-
治理与文化（Governance & Culture）
- 董事会/审计委员会的税务监督职责
- 税务风险偏好及容忍度设定
- 税务合规文化培育
- 税务人才队伍建设
-
战略与目标设定（Strategy & Objective-Setting）
- 税务战略与业务战略的协同
- 税务风险偏好的量化表达
- 税务规划的风险边界
-
绩效（Performance）
- 税务风险识别：PESTLE + 行业特定风险
- 风险评估：可能性 × 影响程度
- 风险应对：规避/降低/转移/接受
- 组合视角：税务风险的相互关联
-
审查与修正（Review & Revision）
- 税务风险监控关键指标（KRI）
- 重大税务事项审查
- 税务风险管理体系有效性评估
- 持续改进机制
-
信息、沟通与报告（Information, Communication & Reporting）
- 税务风险报告体系
- 内外部沟通机制
- 税务数据与信息系统
中国税务风险管理相关法规
-
《大企业税务风险管理指引（试行）》（国税发〔2009〕90号）
- 税务风险管理组织架构
- 税务风险识别和评估
- 税务风险应对策略和内部控制
- 信息与沟通
- 监督和改进
-
《千户集团税收风险分析应对工作规范》
- 重点税源企业的风险指标体系
- 行业风险特征库
Workflow
1. 治理架构设计
├─ 税务风险管理委员会/岗位
├─ 职责分工与汇报路线
├─ 税务风险偏好声明
└─ 税务合规政策制定
2. 风险识别
├─ 税种风险清单（增值税、所得税、关税等）
├─ 业务流程风险（收入确认、成本扣除、关联交易等）
├─ 组织架构风险（控股架构、业务模式等）
├─ 外部环境风险（政策变化、稽查趋势等）
└─ 行业特定风险
3. 风险评估
├─ 风险可能性评分（1-5）
├─ 风险影响程度评分（1-5）
├─ 风险等级矩阵（高/中/低）
├─ 现有控制措施有效性
└─ 剩余风险评估
4. 风险应对
├─ 高风险：专项治理/系统性整改
├─ 中风险：流程优化/加强控制
├─ 低风险：持续监控
└─ 应对措施的资源配置
5. 监控与报告
├─ KRI指标设计及阈值
├─ 定期风险报告（月度/季度/年度）
├─ 重大税务事项专项报告
└─ 管理层/董事会报告
Output Format
# 税务风险管理框架
## 一、治理架构
| 角色 | 职责 | 负责人 | 汇报路线 |
|------|------|--------|----------|
| 税务风险管理委员会 | | | |
| 税务总监 | | | |
| 税务经理 | | | |
| 业务单元税务接口人 | | | |
## 二、税务风险偏好声明
- 整体风险偏好：____
- 绝对不可接受的风险：____
- 可接受的风险水平：____
## 三、风险识别与评估矩阵
| 风险编号 | 风险描述 | 税种 | 影响税额 | 可能性 | 影响 | 风险等级 | 现有控制 | 剩余风险 |
|----------|----------|------|----------|--------|------|----------|----------|----------|
| TR-001 | | | | | | | | |
| TR-002 | | | | | | | | |
## 四、关键风险指标（KRI）
| 指标名称 | 计算方法 | 阈值 | 监控频率 | 责任人 |
|----------|----------|------|----------|--------|
| 有效税率波动 | | ±X% | 季度 | |
| 税务争议金额 | | X万元 | 月度 | |
| 税收优惠合规率 | | 100% | 季度 | |
## 五、风险应对措施
| 风险编号 | 应对策略 | 具体措施 | 责任人 | 完成时间 | 预期效果 |
|----------|----------|----------|--------|----------|----------|
| TR-001 | | | | | |
## 六、报告机制
| 报告类型 | 频率 | 接收人 | 主要内容 |
|----------|------|--------|----------|
| 常规报告 | 季度 | CFO | |
| 重大事项 | 即时 | 审计委员会 | |
| 年度报告 | 年度 | 董事会 | |
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 213 lines · 33 tokens per session scan A 0da507c2e5eb
tax-risk-management-framework is a skill published in the GitHub repository guoliang1114-boop/AriaAI (37 stars, last pushed today), licensed MIT. It adds 33 tokens to every session and 2,221 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
domain_aml
Guidance for monitoring cross-border payments for money laundering and sanctions risks. It explains terms such as suspicious transactions and watchlists, which can include sanctioned people or politically exposed persons.
fin-audit-support
Support SOX 404 compliance with control testing methodology, sample selection, and documentation standards. Use when generating testing workpapers, selecting audit samples, classifying control deficiencies, or preparing for internal or external audits.
fin-sox-testing
Generate SOX sample selections, testing workpapers, and control assessments. Use when planning quarterly or annual SOX 404 testing, pulling a sample for a control (revenue, P2P, ITGC, close), building a testing workpaper template, or evaluating and classifying a control deficiency.
fin-journal-entry
Prepare journal entries with proper debits, credits, and supporting detail. Use when booking month-end accruals (AP, payroll, prepaid), recording depreciation or amortization, posting revenue recognition or deferred revenue adjustments, or documenting an entry for audit review.
regulatory_filing
Parse and retrieve SEC/FINRA filings for an entity.
expense-review-policy
Review invoices and contracts against accounts-payable policy before human approval.