Subscription Manager Pro
v1.0.0Track all your subscriptions, get alerts before renewals, identify forgotten services, and calculate total spend. Never pay for something you forgot to cance...
⭐ 0· 69·0 current·0 all-time
by@kilusha
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (subscription tracking, reminders, spend analysis) match the provided artifacts: SKILL.md describes CLI commands and local JSON storage, claw.json only requires Python and the script file. Nothing in the manifest asks for unrelated cloud credentials or system-wide access.
Instruction Scope
SKILL.md instructs the agent to read/write a clearly scoped data directory (~/.openclaw/workspace/subscription-manager-pro/data) and to run the local script commands. The instructions do not request reading unrelated system files, environment variables, or sending data to external endpoints. One note: users can store arbitrary cancel_url values in records (user-supplied URLs), so the agent or user should be cautious opening those links.
Install Mechanism
There is no install spec (instruction-only) and the included claw.json only declares a Python requirement and the local script. No remote downloads or archive extraction are used.
Credentials
The skill declares no required environment variables, no primary credential, and no special config paths beyond its own data folder. This is proportional to a local subscription manager.
Persistence & Privilege
always is false and autonomous invocation is allowed by default. The skill does not request permanent platform-wide privileges or attempt to modify other skills or agent configs. It persists only to its own data directory.
Assessment
This skill appears coherent: it stores subscription records locally and uses a Python script to manage them, and it does not request cloud credentials or external services. Before installing, you should (1) review the full scripts/manager.py file for any network, subprocess, or shell calls (the visible portion imports only stdlib modules, but the file in the package should be inspected end-to-end), (2) be cautious with any cancel_url entries you add—treat them like bookmarked links and don't click unknown URLs, and (3) ensure you have appropriate backups if you rely on the local JSON data. If you want higher assurance, paste the complete manager.py here (or inspect it locally) so the remaining code paths can be audited for hidden network I/O or shell execution.Like a lobster shell, security has layers — review code before you run it.
latestvk97dbemz1n8awfrkygzcefkzxd8479y0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
💳 Clawdis