Norman: Categorize Transactions
v1.0.0Review and categorize uncategorized bank transactions, match them with invoices, and verify bookkeeping entries. Use when the user wants to review transactio...
⭐ 0· 481·0 current·0 all-time
byStan Kharlap@stanlee000
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description match the runtime instructions: all steps (search_transactions, categorize_transaction, list_invoices, link_transaction, attachment and verification calls) are directly related to transaction categorization and reconciliation. The SKR04 reference (German chart of accounts) is consistent with bookkeeping functionality. The SKILL.md also declares an mcp dependency (norman-finance), which explains where those function calls would be implemented.
Instruction Scope
Instructions are narrowly scoped to fetching, categorizing, matching, attaching receipts, and verifying transactions. They do not instruct the agent to read arbitrary files, access unrelated environment variables, or transmit data to endpoints outside the described finance workflow. The instructions are prescriptive (call these functions, present batches of 10–15) rather than open-ended.
Install Mechanism
There is no install spec and no code files (instruction-only), so nothing is downloaded or written to disk by the skill itself. This minimizes installation risk. The skill relies on an external 'mcp' integration (norman-finance) for runtime capability; validate that integration separately.
Credentials
The skill declares no required environment variables or credentials in the registry metadata. That is proportional to an instruction-only skill because the actual account access would be provided by the referenced mcp/plugin. Users should confirm what credentials the norman-finance integration requires before enabling it.
Persistence & Privilege
always:false (default) and no install behavior means the skill is not force-enabled or installing persistent components. Note: the skill is allowed to be invoked autonomously by the agent (platform default). Because it operates on sensitive financial data, you should ensure the linked mcp/plugin permissions are appropriately scoped and audited.
Assessment
This skill appears coherent and focused on bookkeeping tasks, but it depends on an external 'norman-finance' integration (the MCP) to actually access accounts and run the listed functions. Before installing or enabling it: 1) verify the norman-finance provider is legitimate (check the provider, docs, and permission scopes); 2) confirm what credentials or API access that integration will require and grant only the minimum necessary permissions (read vs. write vs. verify); 3) check audit/logging and revoke capabilities for operations you do not want the skill to perform (e.g., initiating transfers); and 4) test with non-production data or a limited account to ensure behavior matches expectations.Like a lobster shell, security has layers — review code before you run it.
bookkeepingvk97fz9eybttd3wy5zngvb0wja581fsdbfinancevk97fz9eybttd3wy5zngvb0wja581fsdblatestvk97fz9eybttd3wy5zngvb0wja581fsdbmcpvk97fz9eybttd3wy5zngvb0wja581fsdbnormanvk97fz9eybttd3wy5zngvb0wja581fsdbtransactionsvk97fz9eybttd3wy5zngvb0wja581fsdb
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🏷 Clawdis