Finance Skill
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your bank-statement and transaction data may remain on disk for future finance queries.
The skill intentionally stores transaction history and raw financial statements in a persistent local workspace. This is central to the finance-memory purpose, but the information is sensitive and may be reused in later agent tasks.
Transactions: `~/.openclaw/workspace/finance/transactions.json` - Raw statements: `~/.openclaw/workspace/finance/statements/`
Use the skill only if you are comfortable with persistent local finance records, and periodically review or delete the finance workspace if you no longer need it.
Incorrectly parsed transactions could be appended to your local finance history and affect later spending summaries.
The agent is instructed to run a local script that mutates the persistent transaction store. The instruction is purpose-aligned and includes a verification step, but it can affect the accuracy of the user's finance records.
Run `scripts/add-transactions.sh` to append to store 4. **Verify total matches statement**
Review the extracted transaction count and totals before relying on imported data, and keep a backup of transactions.json if accuracy is important.
The skill may not work until extra local packages are installed, and those packages become part of the trusted execution path for handling financial statements.
The skill depends on external packages/tools that are not represented in the declared requirements. This is expected for its parsing and querying workflow, but users should understand and trust the dependency installation path.
- `jq` — for JSON transaction storage and querying (`apt install jq` / `brew install jq`) - `pypdf` — for full PDF text extraction (`pip3 install pypdf`)
Install jq and pypdf only from trusted package managers or environments, and verify the package names before installing.
