Bookkeeping
v1.0.3导入账单、检查重复、查询交易、查看汇总，并通过本地 bookkeeping CLI 执行。优先处理当前消息里已经落到本地的账单附件；当用户要求导入支付宝、微信或本地账单时，优先直接使用当前消息上下文中已有的本地文件路径。
⭐ 0· 106·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is explicitly a frontend for a local `bookkeeping` CLI; required binary and install methods (Homebrew formula, pipx from GitHub) align with that purpose. No unrelated credentials or system accesses are requested.
Instruction Scope
Runtime instructions focus on locating local inbound attachments, optionally invoking the platform's attachment-download capability, and mapping user intents to `bookkeeping` CLI commands. The skill does not instruct reading unrelated system files or exfiltrating data to external endpoints. Dangerous operations (database reset, batch processing) are gated behind explicit user confirmation.
Install Mechanism
Install metadata lists a third-party Homebrew tap (lastarla/tap/bookkeeping-tool) and an option to install via pipx from the project's GitHub repo. These are reasonable for delivering a CLI, but both fetch third-party code — review the tap and GitHub repo before installing to ensure you trust the publisher.
Credentials
No environment variables, credentials, or config paths are requested. The skill only requires a locally-available `bookkeeping` binary, which is proportionate to its stated function.
Persistence & Privilege
Skill is not marked always:true, is user-invocable, and does not request persistent elevated privileges or modify other skills. It can invoke autonomously (platform default) but that is not combined with other red flags.
Assessment
This skill appears to be a thin wrapper around a local `bookkeeping` CLI. Before installing or enabling: 1) confirm you trust the Homebrew tap and the GitHub repo referenced for pipx (third-party code will be fetched to install the CLI); 2) ensure the `bookkeeping` CLI behaves as you expect by running `bookkeeping --help` locally; 3) be aware the skill will read local inbound attachments the agent process can access (e.g., /root/.openclaw/media/inbound/) — any file readable by the agent could be used as input; 4) dangerous commands like `bookkeeping reset --yes` are gated and require explicit confirmation, but verify your workflow and backups before permitting resets; and 5) no credentials are requested by the skill itself, but installing from third-party sources carries standard supply-chain risk, so review the upstream project if you have security concerns.Like a lobster shell, security has layers — review code before you run it.
latestvk978hj8arr3ds8vfdatf5h0vy583wtxx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binsbookkeeping
Install
Install bookkeeping (Homebrew, macOS)
Bins: bookkeeping
brew install lastarla/tap/bookkeeping-tool