Budget Planner

预算规划 - 收支预算、分类管理、超支提醒

Security Scan

The skill's instructions match a simple local CLI budget tool, but metadata and install references are inconsistent and the package source is unknown — proceed with caution.

Purpose & Capability

Name/description and SKILL.md consistently describe a local CLI budget planner (set budget, record expenses, progress, alerts). However the _meta.json lists a dependency on 'curl' that is not referenced in SKILL.md, and README suggests installing via 'npx clawhub@latest install budget-planner' while the registry metadata lists no install spec — minor inconsistencies in how the skill is expected to be acquired/run.

Instruction Scope

The runtime instructions only instruct running 'clawhub' CLI commands and show example usage; they do not request arbitrary file reads, secrets, or external endpoints. They do assume a local 'clawhub' command is present (or that the user has installed it).

Install Mechanism

No formal install spec is included in the registry entry, but README suggests using 'npx clawhub@latest install budget-planner' which would download code at install time. That means actual installation behavior is unspecified here — downloading via npx can pull arbitrary code from npm and is higher risk than an instruction-only skill. Also _meta.json's 'requires' field (curl) conflicts with the registry's declared requirements.

Credentials

The skill does not request any environment variables, credentials, or config paths. This is proportional for a local budgeting helper. No sensitive env names or tokens are declared.

Persistence & Privilege

always is false and model invocation is allowed (default). The skill does not request elevated or persistent system-wide presence in its manifest. There is no evidence it modifies other skills or system configs.

What to consider before installing

This skill appears to be a simple CLI-based budget helper, but there are a few red flags to check before installing: - Source & trust: The homepage and source are unknown and the README suggests installing via 'npx', which will fetch code from npm — confirm the package author and inspect the npm package before running it. - CLI dependency: SKILL.md expects a local 'clawhub' command; ensure 'clawhub' is legitimate and review what it does and where it stores data (local files, remote endpoints). - Metadata mismatch: _meta.json declares 'curl' as required while the registry shows no required binaries; this inconsistency could indicate stale or incomplete metadata. - Data handling: Because the skill interacts with finance data, verify where expense/budget data are stored and whether any network requests are made by the installer/CLI (inspect package code if possible). If you want to proceed safely: fetch and inspect the npm package contents (or the clawhub tool) before running, or run installation in an isolated environment (VM/container). If you need, I can list exact checks to perform on the npm package or on the 'clawhub' binary before trusting it.

预算规划工具，帮你合理花钱。

功能

• ✅ 收支预算
• ✅ 分类管理
• ✅ 超支提醒
• ✅ 月度报告
• ✅ 储蓄目标

使用

# 设置预算
clawhub budget set --category "dining" --amount 2000 --month "2026-04"

# 记录支出
clawhub budget expense --category "dining" --amount 100

# 查看进度
clawhub budget progress --month "2026-04"

# 超支提醒
clawhub budget alert --threshold 90

定价

版本	价格	功能
免费版	¥0	基础功能
Pro 版	¥39	全部功能
订阅版	¥9/月	Pro+ AI 建议