yoooclaw-expense-tracker

• Analyzed: May 14, 2026, 4:16 AM
• Findings: 1
• Version: 1.0.0
• Hash: 9a80c60043f435526c44ed6d07ce764d293e86f69c7629e2131f0fdf37703850
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill requires high-privilege access to sensitive notification data, including bank SMS, payment confirmations, and private messages, as described in SKILL.md. It utilizes a shell command (`openclaw ntf storage-path`) to access local notification logs. While the logic for expense tracking is detailed and includes filtering for marketing content, the broad access to financial and personal communications constitutes a significant privacy risk and a high-risk capability.