ClawHub

Treeline Money

v26.4.301

Chat with your finances from Treeline Money. Query balances, spending, budgets, and transactions.

⭐ 2· 2.9k·3 current·3 all-time
by@zack-schrag
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name, description, and required binary ('tl') align with a Treeline Money CLI skill. The install metadata points to Treeline's GitHub releases for platform-specific binaries, which matches the stated purpose.
✓
Instruction Scope
SKILL.md instructs the agent to run tl commands (status, query, sql, backup, etc.). Read-only commands are explicitly marked safe to run autonomously; write commands are explicitly gated behind user confirmation. The doc explicitly prohibits the agent from attempting to unlock encrypted databases or handle credentials.
ℹ
Install Mechanism
Installation is a download from GitHub releases (urls use github.com/treeline-money/treeline/releases/latest/download/...). This is a reasonable source, but the metadata uses the 'latest' release URL and no checksums are provided in the SKILL.md; that increases supply-chain risk slightly compared to pinned version + checksum.
✓
Credentials
The skill declares no required environment variables, no credentials, and no config paths. That is proportionate for a CLI that operates on a local database.
✓
Persistence & Privilege
The skill is not forced-always (always:false), is user-invocable, and does not request system-wide configuration or other skills' credentials. Autonomous invocation is allowed (platform default) but is not coupled with broad credentials or persistent privileges.
Assessment
This skill appears coherent for interacting with a local Treeline Money CLI. Before installing, confirm you trust the Treeline GitHub releases (the installer points to the repository's 'latest' binaries and no checksums are provided), and verify the release page if you want pinned versions or checksums. The skill will access your local Treeline database and can run arbitrary read-only SQL queries (expected for finance queries); keep your encrypted database locked and do not share passphrases. The skill's docs say it will ask for confirmation before making writes — treat any unexpected write actions as suspicious and decline until verified.

Like a lobster shell, security has layers — review code before you run it.

latestvk97bgpgwbr1agr3xzw4ph72y6x844bhx

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🌲 Clawdis
Binstl

Comments