Paycheck
v2.0.2Calculate salary breakdowns with taxes and deductions. Use when estimating take-home pay, checking withholdings, comparing deductions, analyzing components.
⭐ 0· 171·0 current·0 all-time
byBytesAgain2@ckchzh
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (salary breakdowns, logging, exports) align with the included shell script and SKILL.md. The script implements logging, search, stats, and export functionality that fit the stated purpose; no unrelated credentials, binaries, or services are requested.
Instruction Scope
SKILL.md and the script operate only on local files within the declared data directory and standard POSIX utilities. The instructions do not read unrelated system config, request environment secrets, or send data to external endpoints. They append user-supplied text to local logs and produce local export files.
Install Mechanism
No install spec is provided (instruction-only style), and the included script is pure shell using standard utilities. Nothing is downloaded or extracted from external URLs during install.
Credentials
No required environment variables, credentials, or config paths are declared or accessed beyond HOME for the user data directory. The script's access to the user's home directory is proportional to its purpose of local logging.
Persistence & Privilege
always is false and autonomous invocation is allowed by default. The skill only creates and writes files under its own data directory and does not modify other skills or system-wide agent settings.
Assessment
This skill appears to be a simple local logging/export tool. Before installing, note that it will create and append plain-text entries under ~/.local/share/paycheck (history.log and per-command .log files) and will write export files to that same directory. Do not store sensitive secrets (full SSNs, payroll bank credentials, etc.) in these logs unless you are comfortable with them being plain text. The script has minor bugs (for example the JSON export appends a literal "\n]" rather than a proper newline) but nothing that indicates malicious intent. If you plan to use it for real payroll data, consider encrypting the data directory or restricting file permissions, and review the script locally to confirm it matches your privacy requirements.Like a lobster shell, security has layers — review code before you run it.
latestvk979p7kmtmvwsh90d0c4dmm0ad835fsr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.