Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Intelligent Budget Tracker

v1.0.0

Intelligent budget tracking and financial management library for AI agents - expense tracking, income management, budgets, savings goals, and SkillBoss API H...

0· 24·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for marjoriebroad/intelligent-budget-tracker-2.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Intelligent Budget Tracker" (marjoriebroad/intelligent-budget-tracker-2) from ClawHub.
Skill page: https://clawhub.ai/marjoriebroad/intelligent-budget-tracker-2
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install intelligent-budget-tracker-2

ClawHub CLI

Package manager switcher

npx clawhub@latest install intelligent-budget-tracker-2
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill claims to be a TypeScript 'agent-money-tracker' library that uses SkillBoss API for AI insights. That capability would legitimately require an API key for the external service. However, the registry metadata lists no required environment variables or primary credential while SKILL.md explicitly requires SKILLBOSS_API_KEY. README instructions reference different install names (clawhub install mar-intelligent-budget-tracker) and the skill has no source/homepage — these inconsistencies make it unclear whether the declared capabilities align with what will actually be installed or run.
!
Instruction Scope
SKILL.md contains detailed TypeScript usage and a fetch-based implementation that posts spendingData to https://api.skillboss.com/v1/pilot with an Authorization: Bearer SKILLBOSS_API_KEY header. That means the skill's runtime instructions would transmit potentially sensitive financial transaction data to an external service. The instructions also tell users to npm install 'agent-money-tracker', but the skill bundle contains no code or package — so it's unclear what will be installed or where that package comes from.
Install Mechanism
No install spec is provided in the bundle (instruction-only), which is low risk in itself. However, the SKILL.md tells users to run 'npm install agent-money-tracker' and README suggests 'clawhub install mar-intelligent-budget-tracker' — both reference external package or installer behavior outside the skill bundle. Because no source, homepage, or official release URL is provided, following those install instructions could result in installing an unrelated third-party package.
!
Credentials
The only environment credential referenced in the runtime instructions is SKILLBOSS_API_KEY, which is proportionate to calling SkillBoss for AI insights. But the registry metadata does not declare this required env var — a mismatch that could cause the agent to attempt to read an undeclared secret. More importantly, the skill's operation would send detailed spending data to a third party, so requiring an API key (and therefore giving that party access to user data) is a privacy/security decision users must explicitly authorize.
Persistence & Privilege
The skill does not request persistent/always-on privileges (always: false) and does not include install-time scripts in the bundle. It does not appear to modify other skills or system-wide settings from the provided files.
What to consider before installing
This skill is internally inconsistent and needs verification before use. Key concerns: - SKILL.md requires SKILLBOSS_API_KEY but the registry lists no required env vars — ask the publisher why and confirm where the key must be stored. - The bundle contains no code or source repo; it only documents a TypeScript library and tells you to npm install an external package. Do not run npm install or provide secrets until you verify the package name, publisher, and repository (check npm registry and GitHub repo). Malicious packages can appear under plausible names. - The skill's runtime would send your detailed spending/transaction data to api.skillboss.com. Treat that as sensitive data exfiltration to a third party: confirm the third party's privacy/security policies and whether you trust them with financial data. - Verify the publisher identity (owner ID, homepage, source repo) and request the package's source code. If you still want to try it, sandbox or review the package source first (or run it in an isolated environment) and avoid providing a high‑privilege API key. If you cannot validate the package origin and the SkillBoss service, classify this skill as untrusted and do not install or supply secrets.

Like a lobster shell, security has layers — review code before you run it.

latestvk97510wzenvprqc6qt4aqyttrd85mj0y
24downloads
0stars
1versions
Updated 1d ago
v1.0.0
MIT-0

Agent Money Tracker

A TypeScript library for AI agents to track expenses, income, budgets, and savings goals with SkillBoss API Hub-powered natural language parsing. No frontend required - designed for programmatic use by agents and bots.

Installation

npm install agent-money-tracker

Usage

Initialize the Budget Tracker

import { clawhub } from 'agent-money-tracker';

// Initialize (required before any operations)
await clawhub.initialize();

// Or with custom storage path
await clawhub.initialize('/path/to/data');

Expense Tracking

// Add an expense
await clawhub.addExpense(50, 'Food & Dining', 'Grocery shopping', {
  date: '2026-01-31',
  tags: ['weekly', 'essentials'],
  merchant: 'Whole Foods'
});

// Natural language input (powered by SkillBoss API Hub /v1/pilot)
await clawhub.addFromNaturalLanguage('spent $45 on uber yesterday');

// Get recent expenses
const expenses = clawhub.getExpenses({ limit: 10 });

// Filter by category and date range
const foodExpenses = clawhub.getExpenses({
  category: 'Food & Dining',
  startDate: '2026-01-01',
  endDate: '2026-01-31'
});

Income Tracking

// Add income
await clawhub.addIncome(5000, 'Salary', 'January salary', {
  date: '2026-01-15'
});

// Add freelance income
await clawhub.addIncome(500, 'Freelance', 'Website project');

// Get all income
const income = clawhub.getIncome();

Budget Management

// Create a monthly budget
await clawhub.createBudget('Food Budget', 'Food & Dining', 500, 'monthly', 0.8);

// Check budget status
const status = clawhub.getBudgetStatus();
// Returns: [{ budgetName, spent, limit, remaining, percentageUsed, status }]

// Get budget alerts
const alerts = clawhub.checkBudgetAlerts();
// Returns warnings when threshold or limit exceeded

// Get smart budget suggestions
const suggestions = clawhub.suggestBudgetLimits();
// Returns: [{ category, suggested, average, max }]

Savings Goals

// Create a savings goal
await clawhub.createGoal('Emergency Fund', 10000, {
  description: '6 months expenses',
  deadline: '2026-12-31',
  priority: 'high'
});

// Add contribution
await clawhub.contributeToGoal('goal_abc123', 500, 'January savings');

// Check progress
const progress = clawhub.getGoalProgress();
// Returns: [{ goalName, targetAmount, currentAmount, percentageComplete, daysRemaining, onTrack }]

Analytics & Reports

// Monthly spending summary
const summary = clawhub.getSpendingSummary();
// Returns: { totalExpenses, totalIncome, netSavings, expensesByCategory, incomeByCategory }

// View monthly trends
const trends = clawhub.getMonthlyTrends(12);
// Returns: [{ date, expenses, income, netSavings }]

// Full monthly report
const report = clawhub.generateMonthlyReport(2026, 1);

// Compare to last month
const comparison = clawhub.compareToLastMonth();
// Returns: { expenseChange, incomeChange, topIncreases, topDecreases }

Smart Insights (via SkillBoss API Hub)

// Generate AI-powered insights via SkillBoss API Hub /v1/pilot
const insights = await clawhub.generateInsights();
// Returns insights like:
// - "⚠️ Your dining expenses are 3x higher than usual"
// - "💡 Cancel unused subscriptions to save $50/month"
// - "🏆 You've tracked expenses for 7 consecutive days!"

// Get unread insights
const unreadInsights = clawhub.getInsights();

generateInsights() 底层实现参考

import fetch from 'node-fetch';

const SKILLBOSS_API_KEY = process.env.SKILLBOSS_API_KEY;

async function generateInsightsFromData(spendingData: object): Promise<string[]> {
  const response = await fetch('https://api.skillboss.com/v1/pilot', {
    method: 'POST',
    headers: {
      'Authorization': `Bearer ${SKILLBOSS_API_KEY}`,
      'Content-Type': 'application/json'
    },
    body: JSON.stringify({
      type: 'chat',
      inputs: {
        messages: [
          {
            role: 'user',
            content: `Analyze this spending data and provide 3-5 actionable insights: ${JSON.stringify(spendingData)}`
          }
        ]
      },
      prefer: 'balanced'
    })
  });
  const result = await response.json();
  const text = result.result.choices[0].message.content;
  return text.split('\n').filter((line: string) => line.trim());
}

Recurring Transactions

// Create recurring expense (e.g., Netflix subscription)
await clawhub.createRecurring(
  'expense', 15.99, 'Subscriptions', 'Netflix', 'monthly',
  { startDate: '2026-02-01' }
);

// Create recurring income (e.g., salary)
await clawhub.createRecurring(
  'income', 5000, 'Salary', 'Monthly salary', 'monthly'
);

// Process due recurring transactions
await clawhub.processRecurring();

Data Management

// Get statistics
const stats = clawhub.getStats();
// Returns: { totalTransactions, totalExpenses, totalIncome, netSavings, avgExpense, topCategory }

// Get available categories
const categories = clawhub.getCategories();

// Export data
const jsonData = await clawhub.exportData();

// Create backup
const backupPath = await clawhub.backup();

// Get storage location
const dataPath = clawhub.getDataPath();

Default Categories

Expense Categories

CategoryIcon
Food & Dining🍔
Transportation🚗
Shopping🛍️
Bills & Utilities💡
Entertainment🎬
Health & Fitness💪
Education📚
Personal Care💄
Subscriptions📱

Income Categories

CategoryIcon
Salary💰
Freelance💻
Investments📈
Gifts🎁

Cross-Platform Storage

Data is stored in platform-specific locations:

PlatformDefault Path
Windows%APPDATA%\clawhub
macOS~/Library/Application Support/clawhub
Linux~/.local/share/clawhub

Override with environment variable:

export CLAWHUB_DATA_PATH=/custom/path

Environment Variables

VariableDescription
SKILLBOSS_API_KEYSkillBoss API Hub key,用于自然语言解析和 AI 智能洞察(https://api.skillboss.com/v1/pilot
CLAWHUB_DATA_PATH可选,自定义数据存储路径

API Reference Summary

MethodDescription
initialize(path?)Initialize the budget tracker
addExpense(amount, category, description, options?)Add expense
addIncome(amount, category, description, options?)Add income
addFromNaturalLanguage(text)Parse and add from natural language (via SkillBoss API Hub)
createBudget(name, category, limit, period, threshold?)Create budget
getBudgetStatus()Get all budget statuses
checkBudgetAlerts()Get budget warnings/alerts
createGoal(name, target, options?)Create savings goal
contributeToGoal(goalId, amount, note?)Add to goal
getGoalProgress()Get all goal progress
getSpendingSummary(start?, end?)Get spending breakdown
getMonthlyTrends(months?)Get monthly trend data
generateMonthlyReport(year?, month?)Generate full report
generateInsights()Generate AI insights via SkillBoss API Hub
createRecurring(type, amount, category, desc, freq, options?)Create recurring
processRecurring()Process due recurring transactions
getStats()Get transaction statistics
exportData()Export all data as JSON
backup()Create timestamped backup

Comments

Loading comments...