ClawHub

Ledger Monthly Report

v1.0.0

Generate monthly ledger statistics in CNY with amount and ratio by tag/category, top expense breakdown, and labeled charts. Use when user asks to统计收支, 看占比, 画...

⭐ 0· 42·0 current·0 all-time
by@shing19
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
ℹ
Purpose & Capability
The skill's name/description match the instructions: it runs a local Python script to produce monthly ledger charts and summaries. Minor inconsistency: the metadata lists no required binaries, but SKILL.md expects a Python virtualenv at projects/.venv-chart and a runnable python interpreter in the environment.
✓
Instruction Scope
Instructions are narrowly scoped: determine a month, activate a local venv, run projects/scripts/monthly_report_cny.py against projects/data, produce files in projects/reports, optionally delete generated charts. The skill does not request external network calls, credentials, or unrelated system files in the SKILL.md.
✓
Install Mechanism
No install spec (instruction-only). Nothing is downloaded or installed by the skill itself.
✓
Credentials
No credentials or config paths are requested. The only environment use is temporary (TZ for date calculation) and activating a local virtualenv; this is proportionate to running a local Python report script.
✓
Persistence & Privilege
always is false and the skill does not request persistent presence or modify other skills. It will execute locally and can delete generated chart files on user instruction — normal but requires care.
Assessment
This skill runs a Python script from your workspace and may delete generated chart files if you ask it to — that means it will execute whatever code is in projects/scripts/monthly_report_cny.py and activate projects/.venv-chart. Before using: 1) Inspect projects/scripts/monthly_report_cny.py to confirm it does only what you expect. 2) Verify the virtualenv and python interpreter are from a trusted source (or run in an isolated sandbox). 3) Ensure your ledger data under projects/data is backed up if you care about it. 4) Confirm projects/reports is the intended output location and that reports/*.png is safely ignored in your repo if you rely on that behavior. 5) Consider updating the skill metadata to declare required binaries (python) if you want clearer pre-checking.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ak0v276ym5ga28x28faa6kn83zqk7

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments