Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Intelligent Budget Tracker

v1.0.0

Intelligent budget tracking and financial management library for AI agents - expense tracking, income management, budgets, savings goals, and SkillBoss API H...

0· 33·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for marjoriebroad/mar-intelligent-budget-tracker.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Intelligent Budget Tracker" (marjoriebroad/mar-intelligent-budget-tracker) from ClawHub.
Skill page: https://clawhub.ai/marjoriebroad/mar-intelligent-budget-tracker
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install mar-intelligent-budget-tracker

ClawHub CLI

Package manager switcher

npx clawhub@latest install mar-intelligent-budget-tracker
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The SKILL.md describes an agent-facing TypeScript library that stores financial data locally and optionally calls SkillBoss API for NLP insights; requesting a SKILLBOSS_API_KEY is reasonable for that feature. However, the registry metadata provided earlier lists no required env vars while SKILL.md front-matter and code samples explicitly require SKILLBOSS_API_KEY, and the README and SKILL.md give different install instructions and package names (clawhub install mar-intelligent-budget-tracker vs npm install agent-money-tracker). These mismatches suggest sloppy packaging or incomplete metadata.
Instruction Scope
The runtime instructions focus on expense/income/budget operations and show an explicit network call to https://api.skillboss.com/v1/pilot for AI insights. The instructions do not direct the agent to read unrelated system files, other credentials, or arbitrary external endpoints beyond SkillBoss. No broad or vague 'gather whatever context you need' language is present.
Install Mechanism
This is an instruction-only skill with no install spec and no code files included. That minimizes installer risk, but the documentation references installing an npm package (agent-money-tracker) while the registry slug is mar-intelligent-budget-tracker and README shows a clawhub install command — this mismatch should be clarified before trusting any installation sources.
!
Credentials
SKILL.md requires SKILLBOSS_API_KEY (used in shown fetch code) which is proportionate to the SkillBoss-driven 'generateInsights' feature. However, the registry metadata claimed no required env vars, creating an inconsistency. There are no other credential requests in the docs, which is good, but you should verify the skill will not request additional secrets at runtime and confirm what permissions the SKILLBOSS_API_KEY must have.
Persistence & Privilege
The skill is not marked 'always' and has no install script, no code files, and does not request system-wide configuration changes. It appears to operate on agent-provided storage paths and local backups; no elevated persistence or cross-skill config changes are requested.
What to consider before installing
This skill appears to really be a budget-tracking library that optionally calls SkillBoss for NLP insights — asking for SKILLBOSS_API_KEY is expected for that. However, the published metadata and the documentation disagree about required environment variables and installation method, and the package source/homepage is unknown. Before installing or providing any API key: 1) Contact the publisher or check the upstream npm package and repository to confirm the correct package name and origin. 2) Verify the SkillBoss endpoint (https://api.skillboss.com/v1/pilot) and confirm you trust SkillBoss with your financial data; limit the API key's permissions and use a scoped/rotating key if possible. 3) Prefer a skill that includes source code or a clear install artifact you can review; if you must use this, run it in a sandboxed environment and monitor network traffic to ensure data only goes to expected endpoints. 4) Ask the author to fix metadata (declare SKILLBOSS_API_KEY in registry fields) and clarify installation instructions; treat the current inconsistencies as a red flag.

Like a lobster shell, security has layers — review code before you run it.

latestvk97d68sswssb116twk6nj22cqs85mgs2
33downloads
0stars
1versions
Updated 1d ago
v1.0.0
MIT-0

Agent Money Tracker

A TypeScript library for AI agents to track expenses, income, budgets, and savings goals with SkillBoss API Hub-powered natural language parsing. No frontend required - designed for programmatic use by agents and bots.

Installation

npm install agent-money-tracker

Usage

Initialize the Budget Tracker

import { clawhub } from 'agent-money-tracker';

// Initialize (required before any operations)
await clawhub.initialize();

// Or with custom storage path
await clawhub.initialize('/path/to/data');

Expense Tracking

// Add an expense
await clawhub.addExpense(50, 'Food & Dining', 'Grocery shopping', {
  date: '2026-01-31',
  tags: ['weekly', 'essentials'],
  merchant: 'Whole Foods'
});

// Natural language input (powered by SkillBoss API Hub /v1/pilot)
await clawhub.addFromNaturalLanguage('spent $45 on uber yesterday');

// Get recent expenses
const expenses = clawhub.getExpenses({ limit: 10 });

// Filter by category and date range
const foodExpenses = clawhub.getExpenses({
  category: 'Food & Dining',
  startDate: '2026-01-01',
  endDate: '2026-01-31'
});

Income Tracking

// Add income
await clawhub.addIncome(5000, 'Salary', 'January salary', {
  date: '2026-01-15'
});

// Add freelance income
await clawhub.addIncome(500, 'Freelance', 'Website project');

// Get all income
const income = clawhub.getIncome();

Budget Management

// Create a monthly budget
await clawhub.createBudget('Food Budget', 'Food & Dining', 500, 'monthly', 0.8);

// Check budget status
const status = clawhub.getBudgetStatus();
// Returns: [{ budgetName, spent, limit, remaining, percentageUsed, status }]

// Get budget alerts
const alerts = clawhub.checkBudgetAlerts();
// Returns warnings when threshold or limit exceeded

// Get smart budget suggestions
const suggestions = clawhub.suggestBudgetLimits();
// Returns: [{ category, suggested, average, max }]

Savings Goals

// Create a savings goal
await clawhub.createGoal('Emergency Fund', 10000, {
  description: '6 months expenses',
  deadline: '2026-12-31',
  priority: 'high'
});

// Add contribution
await clawhub.contributeToGoal('goal_abc123', 500, 'January savings');

// Check progress
const progress = clawhub.getGoalProgress();
// Returns: [{ goalName, targetAmount, currentAmount, percentageComplete, daysRemaining, onTrack }]

Analytics & Reports

// Monthly spending summary
const summary = clawhub.getSpendingSummary();
// Returns: { totalExpenses, totalIncome, netSavings, expensesByCategory, incomeByCategory }

// View monthly trends
const trends = clawhub.getMonthlyTrends(12);
// Returns: [{ date, expenses, income, netSavings }]

// Full monthly report
const report = clawhub.generateMonthlyReport(2026, 1);

// Compare to last month
const comparison = clawhub.compareToLastMonth();
// Returns: { expenseChange, incomeChange, topIncreases, topDecreases }

Smart Insights (via SkillBoss API Hub)

// Generate AI-powered insights via SkillBoss API Hub /v1/pilot
const insights = await clawhub.generateInsights();
// Returns insights like:
// - "⚠️ Your dining expenses are 3x higher than usual"
// - "💡 Cancel unused subscriptions to save $50/month"
// - "🏆 You've tracked expenses for 7 consecutive days!"

// Get unread insights
const unreadInsights = clawhub.getInsights();

generateInsights() 底层实现参考

import fetch from 'node-fetch';

const SKILLBOSS_API_KEY = process.env.SKILLBOSS_API_KEY;

async function generateInsightsFromData(spendingData: object): Promise<string[]> {
  const response = await fetch('https://api.skillboss.com/v1/pilot', {
    method: 'POST',
    headers: {
      'Authorization': `Bearer ${SKILLBOSS_API_KEY}`,
      'Content-Type': 'application/json'
    },
    body: JSON.stringify({
      type: 'chat',
      inputs: {
        messages: [
          {
            role: 'user',
            content: `Analyze this spending data and provide 3-5 actionable insights: ${JSON.stringify(spendingData)}`
          }
        ]
      },
      prefer: 'balanced'
    })
  });
  const result = await response.json();
  const text = result.result.choices[0].message.content;
  return text.split('\n').filter((line: string) => line.trim());
}

Recurring Transactions

// Create recurring expense (e.g., Netflix subscription)
await clawhub.createRecurring(
  'expense', 15.99, 'Subscriptions', 'Netflix', 'monthly',
  { startDate: '2026-02-01' }
);

// Create recurring income (e.g., salary)
await clawhub.createRecurring(
  'income', 5000, 'Salary', 'Monthly salary', 'monthly'
);

// Process due recurring transactions
await clawhub.processRecurring();

Data Management

// Get statistics
const stats = clawhub.getStats();
// Returns: { totalTransactions, totalExpenses, totalIncome, netSavings, avgExpense, topCategory }

// Get available categories
const categories = clawhub.getCategories();

// Export data
const jsonData = await clawhub.exportData();

// Create backup
const backupPath = await clawhub.backup();

// Get storage location
const dataPath = clawhub.getDataPath();

Default Categories

Expense Categories

CategoryIcon
Food & Dining🍔
Transportation🚗
Shopping🛍️
Bills & Utilities💡
Entertainment🎬
Health & Fitness💪
Education📚
Personal Care💄
Subscriptions📱

Income Categories

CategoryIcon
Salary💰
Freelance💻
Investments📈
Gifts🎁

Cross-Platform Storage

Data is stored in platform-specific locations:

PlatformDefault Path
Windows%APPDATA%\clawhub
macOS~/Library/Application Support/clawhub
Linux~/.local/share/clawhub

Override with environment variable:

export CLAWHUB_DATA_PATH=/custom/path

Environment Variables

VariableDescription
SKILLBOSS_API_KEYSkillBoss API Hub key,用于自然语言解析和 AI 智能洞察(https://api.skillboss.com/v1/pilot
CLAWHUB_DATA_PATH可选,自定义数据存储路径

API Reference Summary

MethodDescription
initialize(path?)Initialize the budget tracker
addExpense(amount, category, description, options?)Add expense
addIncome(amount, category, description, options?)Add income
addFromNaturalLanguage(text)Parse and add from natural language (via SkillBoss API Hub)
createBudget(name, category, limit, period, threshold?)Create budget
getBudgetStatus()Get all budget statuses
checkBudgetAlerts()Get budget warnings/alerts
createGoal(name, target, options?)Create savings goal
contributeToGoal(goalId, amount, note?)Add to goal
getGoalProgress()Get all goal progress
getSpendingSummary(start?, end?)Get spending breakdown
getMonthlyTrends(months?)Get monthly trend data
generateMonthlyReport(year?, month?)Generate full report
generateInsights()Generate AI insights via SkillBoss API Hub
createRecurring(type, amount, category, desc, freq, options?)Create recurring
processRecurring()Process due recurring transactions
getStats()Get transaction statistics
exportData()Export all data as JSON
backup()Create timestamped backup

Comments

Loading comments...