Dividend
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Dividend entries, notes, searches, and exports may remain on the device until the user deletes them.
The skill intentionally persists user-entered financial data and activity history on disk; this is disclosed and appropriate for a tracker, but the data may be sensitive.
All data is stored locally at `~/.local/share/dividend/`. Each action is logged with timestamps.
Only enter information you are comfortable storing locally, and periodically review or delete files under `~/.local/share/dividend/` if needed.
Financial notes entered through the tool can be searched, viewed, and exported later by anyone with access to the local account files.
The script creates a persistent data directory and appends user-supplied entries to local log files, matching the documented local-history feature.
DATA_DIR="${HOME}/.local/share/dividend"
mkdir -p "$DATA_DIR"
...
echo "$ts|$input" >> "$DATA_DIR/record.log"Protect the local user account and exported files, and avoid entering unrelated secrets or credentials into dividend records.