Bank Statement Converter

Convert PDF bank statements to CSV or JSON using API calls with support for password-protected files and processing status checks.

Security Scan

The instructions do what the skill claims (upload PDFs to an external conversion API), but the registry metadata does not declare the required API key and the skill instructs you to send sensitive bank statements to a third‑party service — verify the service and metadata before using.

Purpose & Capability

SKILL.md describes converting bank-statement PDFs to CSV/JSON via an external API, which matches the skill name and description. However, the registry metadata claims no required environment variables or primary credential, while the SKILL.md clearly requires BANKSTATEMENT_API_KEY — an inconsistency between declared metadata and runtime instructions.

Instruction Scope

The runtime instructions are narrow and in-scope: they tell the agent to register, export an API key, upload a PDF file, poll status, provide a PDF password if needed, and request conversions from api2.bankstatementconverter.com. That scope is appropriate for the stated purpose, but it explicitly directs uploading sensitive bank PDFs and passwords to an external service — a significant privacy/security consideration that the user must assess.

Install Mechanism

There is no install spec and no code files; the skill is instruction-only and only uses curl examples. This is low installation risk because nothing is written to disk by the skill itself.

Credentials

The SKILL.md requires BANKSTATEMENT_API_KEY, but the registry metadata lists no required env vars and no primary credential. Requiring an API key for an external conversion service is reasonable, but the metadata omission is a mismatch that could lead to unexpected behavior or confusion about what secrets the skill will use.

Persistence & Privilege

The skill is not always-enabled and uses normal model invocation; it does not request persistent system privileges or modify other skills' configuration. No elevated persistence privileges are requested.

What to consider before installing

This skill will upload your bank PDFs (and any provided PDF passwords) to api2.bankstatementconverter.com. Before installing: (1) verify the legitimacy of bankstatementconverter.com (look for HTTPS, contact info, privacy policy, reviews); (2) do not upload real sensitive statements until you trust the service—test with dummy data first; (3) note the SKILL.md requires an environment variable BANKSTATEMENT_API_KEY but the registry metadata does not declare it—expect to manually set the API key; (4) prefer using a throwaway or limited-permission account/API key and review the service's data retention/privacy terms. If you are uncomfortable sending bank data to an external service or cannot verify the vendor, do not install or use this skill.

Bank Statement Converter Skill

Convert PDF bank statements to CSV/JSON.

Requirements

BANKSTATEMENT_API_KEY

Setup

1. Register here https://bankstatementconverter.com/legacy-register
2. Verify your email
3. Login https://bankstatementconverter.com/login
4. Get your API key here https://bankstatementconverter.com/settings

export BANKSTATEMENT_API_KEY="your-api-key-here"

APIs

Get your remaining credits and user info

curl -s -H "Authorization: $BANKSTATEMENT_API_KEY" \
  https://api2.bankstatementconverter.com/api/v1/user | jq

Shows user details and credits.

Upload a PDF bank statement

curl -s -X POST \
  -H "Authorization: $BANKSTATEMENT_API_KEY" \
  -F "file=@/path/to/your/bankstatement.pdf" \
  https://api2.bankstatementconverter.com/api/v1/BankStatement | jq

Response example (array of uploaded items):

[
  {
    "uuid": "bb2f3c62-331e-42ee-a931-d25a5ee0946f",
    "filename": "bankstatement.pdf",
    "pdfType": "TEXT_BASED",
    "state": "READY"
  }
]

Save the uuid for the next steps. If state is PROCESSING, poll status.

Check processing status (poll if needed)

curl -s -X POST \
  -H "Authorization: $BANKSTATEMENT_API_KEY" \
  -H "Content-Type: application/json" \
  -d '["bb2f3c62-331e-42ee-a931-d25a5ee0946f"]' \
  https://api2.bankstatementconverter.com/api/v1/BankStatement/status | jq

Poll every ~10 seconds until state becomes READY.

Convert PDF JSON (normalized transactions)

curl -s -X POST \
  -H "Authorization: $BANKSTATEMENT_API_KEY" \
  -H "Content-Type: application/json" \
  -d '["bb2f3c62-331e-42ee-a931-d25a5ee0946f"]' \
  "https://api2.bankstatementconverter.com/api/v1/BankStatement/convert?format=JSON&raw=false" | jq

For CSV instead: change format=CSV. Add &raw=true to get all raw columns instead of normalized.

Provide password for encrypted PDF

If upload returns pdfType: UNKNOWN or indicates password needed:

curl -s -X POST \
  -H "Authorization: $BANKSTATEMENT_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"passwords": [{"uuid": "bb2f3c62-331e-42ee-a931-d25a5ee0946f", "password": "yourpdfpassword"}]}' \
  https://api2.bankstatementconverter.com/api/v1/BankStatement/setPassword | jq

Then poll status or convert as above.# Markdown syntax guide