Compound
v1.0.0Calculate compound interest and investment growth using financial formulas. Use when you need to plan savings, compare rates, or project wealth.
⭐ 0· 146·0 current·0 all-time
bybytesagain4@xueyetianya
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (compound interest calculator) match the provided script and SKILL.md. The script implements calculate, compare, schedule, table, export, history, config, etc., and stores data under ~/.compound as described. No unrelated cloud credentials, binaries, or capabilities are requested.
Instruction Scope
SKILL.md and the script are consistent about accepted calculation env vars and that history is stored at ~/.compound/data.jsonl. However, the embedded Python code also reads DATA_FILE and CONFIG_FILE environment variables (os.environ.get) as overrides for the storage/config paths; these two override vars are not documented in SKILL.md. That means an environment could redirect where results/config are read/written without being obvious from the docs.
Install Mechanism
There is no install spec or remote download; the skill is instruction-only with an included local script. No network downloads or archive extraction are performed. The script will run locally using bash/python, which is expected for this kind of tool.
Credentials
The skill does not request secrets or external service credentials and only uses standard local env vars for inputs (PRINCIPAL, RATE, YEARS, etc.). The only proportionality concern is the undocumented DATA_FILE and CONFIG_FILE env overrides in the script: if someone sets those to paths outside the ~/.compound directory (intentionally or accidentally), the script will read/write there. No other sensitive env vars are referenced.
Persistence & Privilege
The skill persistently writes history and a config file under the user's home (~/.compound). This is expected for a calculator with history and configuration. It does not request always:true, does not modify other skills or system-wide agent settings, nor does it run background services.
Assessment
This skill appears coherent and implements a local compound-interest calculator. Before installing/running: 1) Inspect scripts/script.sh yourself (it is included) — the code is local and readable. 2) Note it will create ~/.compound/config.json and ~/.compound/data.jsonl and append calculation history there. 3) Be aware you (or the environment) can override storage paths with DATA_FILE and CONFIG_FILE environment variables (these overrides are not documented in SKILL.md); avoid setting those to sensitive file paths. 4) Run it as a normal user (not root) and ensure Python 3 is available. If you need stronger guarantees, run the tool in a sandboxed environment or review the full script content before use.Like a lobster shell, security has layers — review code before you run it.
latestvk97217zfsywft2w33n7sats72n835mp3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.