Vehicle Expense Tracker
v1.0.0Track vehicle expenses (gas, maintenance, parts) in Google Sheets and save related photos. Handles mileage, cost, category, and photo organization.
⭐ 1· 1.6k·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description describe tracking vehicle expenses and the code implements that: parsing args, saving photos, appending rows to Google Sheets (via google auth) or writing local Excel files. The features requested in SKILL.md match the code behavior.
Instruction Scope
Runtime instructions are limited to running the provided Python script with appropriate flags. The script reads/writes only its config, locale files, user-supplied photo paths, and target spreadsheets/local Excel files — all expected for the stated functionality.
Install Mechanism
No install specification is provided (instruction-only with an included Python script). Nothing is downloaded or executed from external arbitrary URLs; risk is limited to running the included script locally.
Credentials
The skill declares no required env vars or credentials, which matches the package. It does, however, attempt to reuse a 'google-workspace' skill by appending ../google-workspace to sys.path and importing google_auth.get_service for Google Sheets access. That cross-skill dependency is referenced in SKILL.md but is not enforced in metadata — Google credentials would come from the separate google-workspace skill (proportionate to Sheets integration) and are not requested directly here.
Persistence & Privilege
always is false and the skill does not request persistent elevated privileges. It writes its own config (skills/vehicle-tracker/config.json) and user files under ~/vehicle_tracker (or custom paths) as expected; it does not modify other skills' configs or system-wide settings.
Assessment
This skill appears to do what it says: it writes expense rows to Google Sheets or local Excel and copies any photo file paths you pass to it into a photos folder (default ~/vehicle_tracker). Before installing/running: (1) Be aware it will copy files from paths you provide — only pass trusted photo paths. (2) For Google Sheets mode it reuses a 'google-workspace' skill (google_auth.get_service) — ensure you trust and have configured that skill/service-account credentials; the dependency is referenced in SKILL.md but not declared in metadata. (3) Local Excel mode requires openpyxl; if you don't want cloud access, omit spreadsheet IDs and use local mode. (4) If you want extra assurance, review the tracker.py source (it is included) and the google-workspace code it imports before use.Like a lobster shell, security has layers — review code before you run it.
latestvk97206g9077v8rxzzzvqvtxw5180ctb4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.