v0.0.3

openfinance

ReviewClawScan verdict for this skill. Analyzed May 1, 2026, 7:24 AM.

Analysis

This is a disclosed bank-data connector, but it gives an AI agent API-key access to sensitive balances and transaction history, so it should be reviewed carefully before use.

GuidanceInstall only if you are comfortable letting an AI agent query your linked bank-account data through OpenFinance. Keep the API key private, limit what accounts are linked, request narrow date ranges and fields, use the official API URL unless you trust an alternative, and revoke or rotate the key when finished.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityMediumConfidenceHighStatusNote

SKILL.md

Run a SQL SELECT against the `txns` CTE for aggregations, grouping, and analysis. The query runs read-only with a 5-second timeout and 1000-row limit.

The skill exposes a flexible SQL query endpoint over transaction data. The documented read-only, timeout, and row-limit controls reduce risk, but broad queries could still reveal more financial history than needed.

User impactA broad generated SQL query could pull detailed transaction information into the agent context.

RecommendationAsk the agent to use narrow date ranges, account filters, aggregate results, and selected fields rather than dumping raw transaction rows.

Permission boundary

Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.

Identity and Privilege Abuse

SeverityHighConfidenceHighStatusConcern

SKILL.md

OPENFINANCE_API_KEY ... API key from openfinance.sh ... required: true ... Fetch all connected financial accounts with balances and institution info.

The skill requires a bearer API key for a service linked to bank accounts and documents calls that return all connected account balances. That is high-impact financial-account access even though it matches the stated purpose.

User impactIf installed and configured, the agent can retrieve sensitive banking details such as balances, account names, institutions, and transaction history.

RecommendationUse only if you trust OpenFinance and want the agent to access this data. Prefer least-privilege or read-only keys if available, limit linked accounts, and revoke the key when no longer needed.

Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Insecure Inter-Agent Communication

SeverityMediumConfidenceHighStatusNote

SKILL.md

BASE_URL="${OPENFINANCE_URL:-https://api.openfinance.sh}" ... AUTH_HEADER="Authorization: Bearer $OPENFINANCE_API_KEY"

Requests send the bearer token and financial queries to an external API endpoint, and the optional base URL can change that endpoint. This is expected for the integration but expands the trust boundary.

User impactSensitive financial data and the API authorization header are handled through the configured OpenFinance API endpoint.

RecommendationUse the default official API URL unless you fully trust the custom endpoint, and avoid setting OPENFINANCE_URL to an unverified service.