Personal Bookkeeper
v2.0.1Record double-entry bookkeeping for personal finances. Use when logging transactions, categorizing accounts, balancing ledgers, trending expenses.
⭐ 0· 381·1 current·1 all-time
byBytesAgain2@ckchzh
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, SKILL.md, and the included bash script align: commands implement recording, categorization, exporting, searching, and status checks for personal finance logs. Requested resources are limited to standard Unix utilities and the user's home directory. (Minor note: SKILL.md and the script report v2.0.0 while registry shows v2.0.1 — version metadata mismatch but not a security issue by itself.)
Instruction Scope
Instructions and the script only read/write files under $HOME/.local/share/personal-bookkeeper and use standard utilities. They do not reference external endpoints, unrelated config paths, or request environment credentials. All actions described (logging, exporting, searching) are within the stated bookkeeping scope.
Install Mechanism
There is no install spec (instruction-only), which is low-risk. However, a runnable bash script is included in the package but not installed to PATH by the skill metadata — the agent or user would need to execute the script directly or install it themselves. Be aware the script will create and write files to the user's home directory when run.
Credentials
The skill requires no environment variables or credentials, which is proportionate. It stores all data in plain-text log files in the user's home directory; this is expected but means sensitive financial data is unencrypted and accessible to anyone with access to the account.
Persistence & Privilege
always is false and the skill does not request system-wide privileges or modify other skills/configs. Its persistent effect is confined to creating files under ~/.local/share/personal-bookkeeper, which is appropriate for its purpose.
Assessment
This skill appears to do exactly what it says: a local, pure-bash bookkeeping tool that writes plain-text logs to ~/.local/share/personal-bookkeeper. Before installing or running it, consider: (1) sensitive financial data will be stored unencrypted in your home directory — if that’s a concern, back up/encrypt the directory or avoid storing highly sensitive items; (2) there is no automatic installer — the included script must be run or installed to your PATH manually; (3) verify the script content (it’s short and readable) before running to ensure you trust the source; (4) there are no network calls or credential requests, so exfiltration risk is low; (5) the registry metadata and the script have a version mismatch (v2.0.0 vs v2.0.1) — minor but check you’re using the intended release.Like a lobster shell, security has layers — review code before you run it.
latestvk977vtbce32x8t723x5k7bbhhn835nt0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.