Quit Overspending

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: quit-overspending Version: 1.0.0 The provided files consist of metadata (`_meta.json`) and a skill description (`SKILL.md`). The `SKILL.md` outlines the purpose, usage, milestones, and tips for a 'quit-overspending' skill. There is no executable code, and the markdown content does not contain any prompt injection attempts against the AI agent, nor does it instruct the agent to perform any high-risk actions such as data exfiltration, unauthorized file access, or network communication. The content is entirely aligned with the stated purpose of helping users manage spending habits.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your spending urges, triggers, goals, and possible debt-related details could be recorded as part of using the skill.

Why it was flagged

The skill is designed to record personal behavioral and spending-related details. This is purpose-aligned, but the information may be sensitive.

Skill content
“Impulse urge logging: Captures the moment you feel the urge to buy—what triggered it, how strong the urge was, whether you resisted”
Recommendation

Only share details you are comfortable keeping in the agent’s working context or local records, and clarify how entries can be reviewed or deleted.

What this means

A user might disclose more sensitive financial or behavioral information because the privacy statement sounds absolute.

Why it was flagged

This is a strong privacy assurance, while the instruction-only artifacts do not define a concrete storage location, retention policy, or deletion workflow.

Skill content
“All data stays local on your machine: Your spending habits, urges, and savings goals never leave your device—complete privacy, complete control”
Recommendation

Treat the privacy claim cautiously unless the platform or skill documentation clearly explains where the data is stored and how to delete it.