Pension

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your pension or finance notes, history, and exported reports may remain on disk until you delete them.

Why it was flagged

The skill intentionally keeps persistent local records of finance-related user input; this is purpose-aligned, but the data may be sensitive.

Skill content
All data is stored locally at `~/.local/share/pension/`. Each action is logged with timestamps.
Recommendation

Only record information you are comfortable storing locally, protect your user account/device, and periodically review or delete old logs and exports if needed.

What this means

You may need to inspect or understand how the included script is installed or invoked before trusting it.

Why it was flagged

The artifact has limited provenance and setup documentation while including a shell script and documenting a `pension` CLI command. No remote download or automatic execution is shown.

Skill content
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.
Recommendation

Review the included script and only install or alias the command from a source you trust.