支出追踪器

PassAudited by ClawScan on May 1, 2026.

Overview

This is a simple instruction-only expense tracker that appears purpose-aligned, with the main thing to notice being that it stores personal spending and budget information in local JSON files.

This skill looks safe and coherent for basic personal expense tracking. Before installing, be aware that it may create or update local expenses.json and budget.json files containing personal financial information.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI06: Memory and Context Poisoning

What this means

Your spending history and budget settings may be saved locally and reused by the agent when you use this skill.

Why it was flagged

The skill explicitly stores personal spending records and budget settings in persistent JSON files. This is expected for an expense tracker, but the data may be personally sensitive.

Skill content

## 数据存储
- expenses.json - 支出记录
- budget.json - 预算设置

Recommendation

Use it only for spending details you are comfortable storing locally, and periodically review or delete the JSON files if you no longer need them.