Auditor finds poor oversight of club 'community contributions'