ExpenseLog Conversational Expense Tracking

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is a coherent local expense tracker, with the main privacy consideration being that it saves personal spending records to a local JSON file.

This looks safe for basic local expense tracking. Before installing, be aware that your expense descriptions and amounts are saved locally in an expenses.json file, so use a private folder and do not enter details you would not want stored on disk.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your spending history and merchant descriptions may remain on disk and could be read by anyone or any process with access to that file.

Why it was flagged

The skill persists expense records, including descriptions, categories, dates, and timestamps, to a local JSON file.

Skill content
this.dataFile = options.dataFile || './expenses.json'; ... fs.writeFileSync(this.dataFile, JSON.stringify(this.expenses, null, 2));
Recommendation

Store the expense file in a private location, avoid entering unnecessary sensitive details, and back up or delete the file according to your privacy needs.