支付宝账单汇总

PassAudited by ClawScan on May 10, 2026.

Overview

The skill matches its stated billing-summary purpose, but it uses authorized Alipay billing data and recurring scheduled reports, so users should verify authorization, schedule, and report visibility.

Before using this skill, make sure you trust the Alipay access skill it depends on, authorize only the intended account, choose only the weekly/monthly/yearly schedules you actually want, and confirm where the financial reports will be announced or stored.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill may access private Alipay billing information after the user authorizes the relevant service.

Why it was flagged

The skill depends on authorized access to a user's Alipay billing data, which is expected for the purpose but involves account-level financial authority.

Skill content
账单数据来源于支付宝,需用户已授权
Recommendation

Authorize only the intended Alipay account and verify the permissions and behavior of the Alipay access mechanism before creating scheduled reports.

What this means

Billing reports could reveal financial habits if shown in a shared workspace, notifications, logs, or other visible agent context.

Why it was flagged

The generated reports summarize sensitive financial details such as income, spending, large transactions, and payment methods.

Skill content
消费总额、收入总额 ... 大额支出 ... 支付方式汇总
Recommendation

Use the skill only in a private context and confirm where generated reports are displayed or stored.

What this means

Reports may continue to run weekly, monthly, or yearly until the scheduled tasks are removed.

Why it was flagged

The skill documents recurring cron tasks that will continue generating reports after setup. This persistence is disclosed and central to the automatic-summary purpose.

Skill content
openclaw cron add --name "每周账单汇总" --cron "15 9 * * 1" ... --announce
Recommendation

Create only the schedules you want and know how to list, pause, or delete the OpenClaw cron jobs later.

What this means

This skill's safety partly depends on the separate Alipay service skill.

Why it was flagged

The actual Alipay data retrieval is delegated to another skill that is not included in this artifact set, so its implementation and permission handling are outside this review.

Skill content
此技能依赖 `call-alipay-service` 技能查询支付宝账单数据。
Recommendation

Review or trust the `call-alipay-service` skill separately before using this scheduled billing-summary skill.