Personal Finance Tracker

Security checks across malware telemetry and agentic risk

Overview

The skill is a coherent local finance tracker that stores sensitive financial records in a local SQLite database, with no evidence of hidden network access, credential use, or exfiltration.

This appears safe for its stated purpose, but it will create and maintain a local database of your financial activity. Use it only for data you are comfortable storing in the OpenClaw workspace, and be aware that summaries and reminders may reuse that stored information.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI06: Memory and Context Poisoning
Low
What this means

Expense amounts, categories, and payment reminders may remain stored locally and be used later for summaries or reminders.

Why it was flagged

The skill persists personal finance records, including transactions, budgets, and reminders, so users should treat the local database as sensitive.

Skill content
SQLite Backend: All data is stored in `finance.db`.
Recommendation

Only enter financial details you are comfortable storing locally, and know where the database is kept if you need to back it up or delete it.

#
ASI05: Unexpected Code Execution
Info
What this means

Running the setup script creates or updates a local finance database in the skill workspace.

Why it was flagged

The skill references a local Python setup script. The provided script is purpose-aligned and only creates the SQLite schema and default categories.

Skill content
Run `scripts/init_db.py` to initialize the database
Recommendation

Review or keep a copy of the database before reinitializing if you already have finance data stored.