ClawHub

Nex Expenses

v1.0.0

Track and categorize all business expenses with automatic Belgian tax deduction rules and VAT recovery optimization. Use optical character recognition (OCR)...

⭐ 1· 29·0 current·0 all-time
byNex AI@nexaiguy
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
CryptoCan make purchases
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (Belgian expense tracking with OCR) align with required binaries (python3, tesseract), included modules (OCR, categorization, SQLite storage), and declared file list. The code implements local receipt OCR, parsing, categorization, storage, export, and summary generation — all expected for the stated purpose.
✓
Instruction Scope
SKILL.md instructs the agent to run the included CLI and setup.sh, scan receipts, and export files. The runtime instructions and code operate on local files and the local SQLite DB and reference only the optional env vars documented in config (NEX_EXPENSES_DATA, TESSERACT_CMD). There are no instructions to read unrelated system files or to transmit data to external endpoints in the visible code or SKILL.md.
ℹ
Install Mechanism
No registry install spec was provided (instruction-only), but the package includes a setup.sh that will create a virtualenv and install dependencies per README. The setup.sh itself was included but not fully shown in the truncated listing — the existence of a setup script that may run package installs or remote fetches warrants a brief manual review before executing.
✓
Credentials
The skill requests no credentials and no required environment variables. The code reads optional env vars (NEX_EXPENSES_DATA, TESSERACT_CMD) which are reasonable for configuring local data and the tesseract binary. There are no signs of requests for unrelated secrets or multiple external credentials.
✓
Persistence & Privilege
The skill stores data locally under a configurable data directory (~/.nex-expenses by default) and initializes an on-disk SQLite DB and receipts folder. It does not request permanent platform-wide privileges (always is false) and does not modify other skills or global agent settings in the visible code.
Assessment
This skill appears coherent and implements local OCR, categorization, and SQLite storage as described. Before installing/running: (1) inspect setup.sh to confirm it only creates a venv and installs expected Python packages (avoid running scripts that download or execute code from unknown servers), (2) confirm tesseract is installed from your OS package manager, (3) be aware data and receipts will be stored by default in ~/.nex-expenses (set NEX_EXPENSES_DATA to relocate), and (4) if you need to be extra cautious, run installation in an isolated environment (container or VM) and review the full setup.sh and any pip installs for unexpected remote sources.

Like a lobster shell, security has layers — review code before you run it.

latestvk97732kkgmxsvcfk5exjsdjqq9849h54

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🧾 Clawdis
Binspython3, tesseract

Comments