ExpenseLog Conversational Expense Tracking
v1.0.0Track expenses by talking to your agent. Spent 45 on groceries. Categories, monthly reports, budget tracking. No spreadsheet needed.
⭐ 0· 239·1 current·1 all-time
byShadow Rose@theshadowrose
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the provided code and SKILL.md: natural-language expense logging, auto-categorization, budgets, CSV export. The Node.js file implements these features and only reads/writes a local JSON file; nothing requested is out of scope.
Instruction Scope
SKILL.md limits runtime actions to logging, reporting, and exporting. It does not instruct the agent to read unrelated system files, access other services, or transmit data externally. The embedded disclaimer and README align with the implementation (local storage).
Install Mechanism
No install spec is provided (instruction-only), and the included code is pure Node.js using only built-in 'fs'. No external downloads or package installs are required by the manifest.
Credentials
The skill declares no environment variables, no credentials, and no config paths. That matches the code which relies only on a local data file (default './expenses.json').
Persistence & Privilege
The skill is not marked 'always' and uses no special privileges. It writes and reads its own local data file only and does not modify other skills or global agent configuration.
Assessment
This skill appears to be a simple local expense logger. Before installing/run: (1) review or run the included src/expense-log.js in a safe environment to confirm behavior, (2) note it writes to ./expenses.json by default — back up any existing file with that name or set a different dataFile path, (3) consider running it in a container or isolated workspace if you don't fully trust the author, and (4) be aware that errors during save are silently ignored by the code (risk of data not being persisted). There are no indications of network exfiltration or requests for secrets.Like a lobster shell, security has layers — review code before you run it.
budgetvk972aqezgw87x2n67yehbnsch182n11wexpense-logvk972aqezgw87x2n67yehbnsch182n11wexpensesvk972aqezgw87x2n67yehbnsch182n11wfinancevk972aqezgw87x2n67yehbnsch182n11wlatestvk972aqezgw87x2n67yehbnsch182n11wloggingvk972aqezgw87x2n67yehbnsch182n11wtrackingvk972aqezgw87x2n67yehbnsch182n11w
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
