Generate Alipay WeChat Report

ReviewAudited by ClawScan on May 1, 2026.

Overview

This appears to be a purpose-aligned local spending report generator, but it handles sensitive payment-history files and saves a detailed local HTML report.

Use this only for Alipay and WeChat bill exports you intend to analyze. Provide explicit input files or a narrow bills folder, verify the agent runs the bundled Python script from the installed skill path, and keep the generated HTML report private.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If pointed at a broad directory, the agent may locate and process payment-history exports the user did not specifically name.

Why it was flagged

The script recursively auto-discovers matching Alipay and WeChat bill files under the selected input directory.

Skill content
matches.extend(candidate for candidate in base_dir.rglob(pattern) if candidate.is_file())
Recommendation

Use explicit --alipay and --wechat paths, or pass a narrow --input-dir containing only the intended bill exports.

What this means

On a different machine, this path may fail or could point to a different local file if such a path exists.

Why it was flagged

The command examples use a fixed absolute local path rather than a portable reference to the installed bundled script.

Skill content
python /Users/codefriday/.codex/skills/generate-alipay-wechat-report/scripts/generate_spending_report.py
Recommendation

Confirm the agent runs the included scripts/generate_spending_report.py from the actual installed skill location.

What this means

The local HTML report and any agent summary may expose sensitive personal financial habits if shared or stored insecurely.

Why it was flagged

The generated report is designed to include detailed spending analysis, merchant patterns, and transaction-derived insights.

Skill content
top transactions and recurring merchants
Recommendation

Save the report in a private location, avoid uploading it elsewhere, and ask the agent to summarize only the level of detail you are comfortable sharing.