Ai Intelligent Budget Management

企业预算编制与执行跟踪，智能预警。

Security Scan

The skill's description matches a budget-management tool, but its runtime instructions tell an agent to fetch and run external code (a GitHub repo that is not bundled or verified) and there are small metadata inconsistencies — this mismatch increases risk and warrants caution.

Purpose & Capability

Name/description, features, and tech stack (Python/FastAPI + PostgreSQL) are coherent for a budget-management tool. However, the skill package contains no code or binaries and instructs the user/agent to git clone a repository rather than providing the code; skill.json author differs from the SKILL.md claimed author/team, and the registry 'source' and 'homepage' are missing — a modest inconsistency.

Instruction Scope

SKILL.md explicitly instructs running shell commands to 'git clone' an external GitHub repo and 'python app.py'. For an instruction-only skill, asking the agent to fetch and execute external code expands scope beyond what is shipped and could result in executing arbitrary third-party code. The instructions also reference PostgreSQL (implying credentials/config), but the skill does not declare how those are provided.

Install Mechanism

There is no formal install spec in the skill metadata; instead the README-like SKILL.md tells users/agents to download from a GitHub repo. Downloading and executing remote code is higher-risk than an instruction-only skill that stays local. The GitHub host is a known release host (lower risk than arbitrary URLs), but the repo is not included in the package and its trustworthiness is unknown.

Credentials

The skill declares no required environment variables or credentials, which is consistent with a readme-only listing. However, the app requires PostgreSQL and likely needs DB credentials and configuration in practice — the instructions do not declare or justify how credentials will be supplied, creating a gap between stated requirements and operational needs.

Persistence & Privilege

The skill does not request 'always: true' and has default invocation privileges. That said, an agent following the provided instructions could autonomously clone and run external code; this is a usage risk but not an elevated privilege request in the skill metadata itself.

What to consider before installing

This skill appears to describe a legitimate budget-management app, but it does not include code and instructs you (or an agent) to git clone and run a remote repository. Before installing or executing anything: verify the GitHub repository (owner, commits, README, issues), review the repository source code for data exfiltration or unsafe actions, run it in a sandboxed environment (isolated VM/container), require explicit configuration for any DB credentials (do not reuse production secrets), and prefer an official homepage or packaged release. If you cannot or will not review the repo, avoid running the provided clone-and-run steps.

AI 智能预算管理系统

描述

企业预算编制与执行跟踪，智能预警。

功能

• 预算编制（多维度预算）
• 执行跟踪（实时监控）
• 预警提醒（超预算预警）
• 预算分析（偏差分析）
• 预测模型（AI预测）

定价

• 基础版：¥199/月（10 部门）
• 专业版：¥999/月（50 部门）
• 企业版：¥2999/月（无限部门）

适用场景

• 企业财务管理
• 项目预算
• 部门预算
• 年度预算

技术栈

• Python + FastAPI
• 数据库（PostgreSQL）
• 预算模型
• 可视化（Dashboard）

安装

git clone https://github.com/openclaw-skills/ai-intelligent-budget-management
cd ai-intelligent-budget-management
pip install -r requirements.txt
python app.py

---

创建：2026-03-13 作者：OpenClaw Skills Team