yoooclaw-expense-tracker
ReviewAudited by ClawScan on May 14, 2026.
Overview
This instruction-only expense tracker is coherent and purpose-aligned, but it will read sensitive phone notification and spending details for the requested time period.
This skill appears benign and aligned with its expense-tracking purpose. Before installing, understand that it works by reading local phone notification files, which may include private messages and financial details; use narrow date ranges and review outputs before sharing them.
Publisher note
Extract and categorize your spending from phone notifications — food delivery, transit, bills, shopping — with daily/weekly/monthly totals.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may run a local command and read notification files from the returned directory when answering spending questions.
The skill instructs the agent to use a local Bash command to discover where notification data is stored. This is disclosed and directly supports the expense-tracking purpose, but it is still local tool/file access users should notice.
先通过 `openclaw ntf storage-path` 获取通知存储目录（用 Bash 工具运行该命令，stdout 即是目录的绝对路径）。
Use specific date ranges and only provide custom paths when you intend the agent to read those files.
Private notification content for the selected period may be processed to produce spending summaries, even if only financial items are shown in the final answer.
The skill reads daily notification files containing all app notifications, then filters for spending events. That can expose sensitive financial transactions, message titles, merchants, routes, refunds, and transfers to the agent context.
文件命名：`YYYY-MM-DD.json`，一天一文件，包含当日全部 App 通知
Install only if you are comfortable with the agent processing notification history; prefer narrow time windows and avoid sharing resulting summaries where sensitive details could leak.