Budget
PassAudited by ClawScan on Feb 24, 2026.
Overview
The skill's code, instructions, and resource requests are consistent with a local budget-tracking tool: it stores data under the user's home directory, requires only python3, and does not request credentials or network access.
This skill appears to do what it claims: a simple local budget tracker implemented as a Python script. Before installing or running it, consider: (1) review the included scripts (they are small and readable) — they run locally and do not perform network I/O or request credentials; (2) the data file is stored at ~/.openclaw/budget-tracker/budget.json by default (unencrypted) — if you store sensitive notes, consider using a protected directory or overriding --data-dir; (3) ensure python3 on your system is the intended interpreter; (4) because the agent can invoke skills autonomously, an agent with this skill could log transactions or check budgets on its own — this is expected behavior but be aware of what automated agents are allowed to do; and (5) keep an eye on updates or new versions that might change behavior (e.g., adding network access). Overall, there are no red flags in the code or instructions.
