Dividend
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: dividend Version: 2.0.0 The 'Dividend' skill is a simple, local-only bash-based logging utility for tracking financial entries. Analysis of 'scripts/script.sh' and 'SKILL.md' shows no network activity, no data exfiltration, and no suspicious execution patterns; it strictly manages text files within the user's local directory (~/.local/share/dividend/).
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Dividend entries, notes, searches, and exports may remain on the device until the user deletes them.
The skill intentionally persists user-entered financial data and activity history on disk; this is disclosed and appropriate for a tracker, but the data may be sensitive.
All data is stored locally at `~/.local/share/dividend/`. Each action is logged with timestamps.
Only enter information you are comfortable storing locally, and periodically review or delete files under `~/.local/share/dividend/` if needed.
Financial notes entered through the tool can be searched, viewed, and exported later by anyone with access to the local account files.
The script creates a persistent data directory and appends user-supplied entries to local log files, matching the documented local-history feature.
DATA_DIR="${HOME}/.local/share/dividend"
mkdir -p "$DATA_DIR"
...
echo "$ts|$input" >> "$DATA_DIR/record.log"Protect the local user account and exported files, and avoid entering unrelated secrets or credentials into dividend records.