Openclaw Receipt Manager
PassAudited by ClawScan on May 1, 2026.
Overview
This receipt manager appears coherent and local-only, but it will persist personal receipt images and extracted expense details on your machine.
This skill looks purpose-aligned and does not show cloud upload or credential use. Before installing, be comfortable with it keeping local copies of receipt images, OCR text, and expense records, and verify the GitHub source if you use the README's manual clone command.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your purchase history, receipt images, and extracted expense details may remain on disk across sessions.
The skill persistently stores receipt images and extracted receipt details, including OCR text and metadata, in a local database.
DATA_DIR = ROOT / "data" / "receipts" ... ocr_text TEXT, items_json TEXT, meta_json TEXT
Install only if you are comfortable keeping receipt data locally; consider protecting backups, reviewing the data directory, and deleting old records when no longer needed.
Receipt images you send may be archived locally without an additional confirmation step.
The skill discloses automatic local mutation of its receipt database when a receipt image is recognized.
After OpenClaw recognizes the receipt image, the data is saved automatically via handler.
Send only receipts you intend to store, and periodically review the local receipt database/images directory.
If you install manually from the linked repository, you are trusting that external source and whatever code it contains at clone time.
The README suggests manual installation from an external GitHub repository even though the registry metadata lists the source as unknown and no homepage is provided.
git clone https://github.com/clinchcc/openclaw-receipt-manager.git ~/.openclaw/workspace/skills/receipt
Prefer installing from a trusted registry/package source, or verify the repository owner and reviewed commit before cloning.