Dividend
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a local-only dividend tracking tool that stores user-entered financial records on the machine and does not show credential use or network exfiltration.
This skill looks coherent for a lightweight offline dividend tracker. Before installing, be aware that it keeps local history and export files under `~/.local/share/dividend/`; do not enter passwords, API keys, or information you would not want stored in local plaintext files.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Dividend entries, notes, searches, and exports may remain on the device until the user deletes them.
The skill intentionally persists user-entered financial data and activity history on disk; this is disclosed and appropriate for a tracker, but the data may be sensitive.
All data is stored locally at `~/.local/share/dividend/`. Each action is logged with timestamps.
Only enter information you are comfortable storing locally, and periodically review or delete files under `~/.local/share/dividend/` if needed.
Financial notes entered through the tool can be searched, viewed, and exported later by anyone with access to the local account files.
The script creates a persistent data directory and appends user-supplied entries to local log files, matching the documented local-history feature.
DATA_DIR="${HOME}/.local/share/dividend"
mkdir -p "$DATA_DIR"
...
echo "$ts|$input" >> "$DATA_DIR/record.log"Protect the local user account and exported files, and avoid entering unrelated secrets or credentials into dividend records.