Budget & Expense Tracker
v1.0.0Track expenses, enforce budgets, detect unusual spending, manage savings goals, and get weekly/monthly financial reports via natural language with your AI ag...
⭐ 1· 637·1 current·1 all-time
by@1kalin
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The SKILL.md and README describe a local budget & expense tracker whose behaviors (creating/updating budget-profile.json and budget-ledger.json, parsing natural language, enforcing budgets) match the skill name. The registry entry lacks a short description and the source/homepage are missing — this is a minor provenance gap but not a functional mismatch.
Instruction Scope
Runtime instructions are self-contained and confined to the agent workspace: creating/editing budget-profile.json and budget-ledger.json, parsing user messages, applying recurring rules, and generating alerts and reports. The instructions do not reference external endpoints, other system config paths, or extra environment variables.
Install Mechanism
No install spec and no code files are present (instruction-only). Nothing is downloaded or written beyond the JSON files the skill explicitly manages; this is the lowest-risk install posture.
Credentials
The skill requests no environment variables, credentials, or config paths. All required data is stored locally in JSON files described in SKILL.md, which is proportionate to its stated purpose.
Persistence & Privilege
always is false and the skill does not request elevated privileges or system-wide configuration changes. The skill will autonomously update local JSON files as part of normal operation; this is expected and proportional.
Assessment
This skill appears internally consistent and local-only, but check a few practical points before trusting it with real financial data: (1) Test it in an isolated workspace first so financial JSON files don't mix with other data. (2) Confirm the agent (and other installed skills) cannot send data externally — the SKILL.md does not call external APIs, but other skills could. (3) Back up and/or encrypt budget-ledger.json and budget-profile.json if they contain sensitive info. (4) Note the registry entry has no homepage or publisher information; if you need provenance, try to verify the owner ID or prefer skills with a known author. (5) Review and keep SKILL.md visible so you can audit any future changes that might introduce network calls or unexpected file access.Like a lobster shell, security has layers — review code before you run it.
budgetvk97drgrdam8d99adh71s2kr0f1812h30expensevk97drgrdam8d99adh71s2kr0f1812h30financevk97drgrdam8d99adh71s2kr0f1812h30latestvk97drgrdam8d99adh71s2kr0f1812h30moneyvk97drgrdam8d99adh71s2kr0f1812h30savingsvk97drgrdam8d99adh71s2kr0f1812h30trackingvk97drgrdam8d99adh71s2kr0f1812h30
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
