个人记账
v1.0.0个人记账技能，支持文字输入和图片账单识别。当用户提到记账、记录花费、添加支出/收入、上传账单图片、查看账单、统计消费时必须使用此技能。用户单独发送图片（无任何文字）时也必须触发此技能，直接看图判断金额并记账，不要等待用户补充说明。所有账单按天存储在 bills/ 文件夹中，同一天的账单累加到同一文件。
⭐ 0· 132·0 current·0 all-time
by@jzw6
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, SKILL.md and the included script align: a personal accounting skill that parses user text/images and appends records to bills/YYYY-MM-DD.md. There are no unrelated binaries, credentials, or external integrations requested.
Instruction Scope
Instructions require the agent to autonomously interpret images (including when the user sends only an image) and record entries without asking for confirmation. This is a behavioral/UX concern (unintended writes) but not a code-level security mismatch. The script itself only reads/writes local files under the skill folder.
Install Mechanism
Instruction-only skill with a local Python script; no install spec, no downloads, and no external package install is requested.
Credentials
The skill requires no environment variables, credentials, or config paths. The requested permissions are limited to creating/reading/writing the bills/ directory inside the skill tree, which is consistent with its purpose.
Persistence & Privilege
The script persists records by creating/appending Markdown files in bills/. always is false and the skill does not alter other skills or global agent settings. Be aware the skill will create persistent files in its directory and will write entries automatically if the agent follows the SKILL.md behavior.
Assessment
This skill appears to do what it says: local bookkeeping using a Python script that writes daily Markdown files in a bills/ directory. There is no network activity or secret access. Two practical things to consider before installing: 1) The SKILL.md requires the agent to automatically record when the user sends an image (no confirmation). If you do not want automatic writes from image-only messages, modify the instructions or require user confirmation. 2) Files are stored persistently inside the skill directory — check where that directory lives in your environment and whether you want those records there (backup, encryption, or deletion policies). If you need stricter privacy, run the script in a controlled location or require explicit confirmation before writing entries.Like a lobster shell, security has layers — review code before you run it.
latestvk9772z2q6n25q5613hp3rhc4f583xtb1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.