Budget

• Analyzed: May 11, 2026, 4:41 AM
• Findings: 0
• Version: 1.0.0
• Hash: ca13253d1a6b159499090fa6f270b057f77709bf631e74bd8e8dd926b982e7ca
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: budget Version: 1.0.0 The OpenClaw Budget Tracker skill is designed to manage agent spending locally. The `SKILL.md` provides clear, benign instructions for its use, without any prompt injection attempts. The `scripts/budget.py` code implements the stated functionality, storing data in `~/.openclaw/budget-tracker/budget.json` by default. While the `--data-dir` argument allows specifying an arbitrary path for data storage, this is a common configuration feature and not indicative of malicious intent by the skill itself, nor does the skill attempt to write to sensitive locations by default. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation.