← Back to Skills Marketplace
jayhickey

Copilot Money Skill

by jayhickey · GitHub ↗ · v1.1.2
cross-platform ⚠ suspicious
2940
Downloads
0
Stars
15
Active Installs
4
Versions
Install in OpenClaw
/install copilot-money
Description
Query Copilot Money personal finance data (accounts, transactions, net worth, holdings, asset allocation) and refresh bank connections. Use when the user asks about finances, account balances, recent transactions, net worth, investment allocation, or wants to sync/refresh bank data.
README (SKILL.md)

Copilot Money CLI

Command-line interface for Copilot Money, a personal finance app. Authenticate once and query accounts, transactions, holdings, and allocation data from your terminal.

Note: This is an unofficial tool and is not affiliated with Copilot Money.

Install

pip install copilot-money-cli

Quick start

copilot-money config init
copilot-money accounts
copilot-money networth

Commands

copilot-money refresh                     # Refresh all bank connections
copilot-money accounts                    # List accounts with balances
copilot-money accounts --type CREDIT      # Filter by type
copilot-money accounts --json             # Output as JSON
copilot-money transactions                # Recent transactions (default 20)
copilot-money transactions --count 50     # Specify count
copilot-money networth                    # Assets, liabilities, net worth
copilot-money holdings                    # Investment holdings (grouped by type)
copilot-money holdings --group account    # Group by account
copilot-money holdings --group symbol     # Group by symbol
copilot-money holdings --type ETF         # Filter by security type
copilot-money allocation                  # Stocks/bonds with US/Intl split
copilot-money config show                 # Show config and token status
copilot-money config init                 # Auto-detect token from browsers
copilot-money config init --source chrome # From specific browser
copilot-money config init --source manual # Manual token entry

Authentication

Config stored at ~/.config/copilot-money/config.json. The CLI auto-detects your Copilot Money refresh token from supported browsers on macOS.

  • Auto-detect: copilot-money config init
  • Explicit source: copilot-money config init --source arc|chrome|safari|firefox
  • Manual entry: copilot-money config init --source manual

When using browser auto-detection, the CLI reads your browser's local IndexedDB storage to find your Copilot Money session token. This happens locally — no data is sent anywhere except to Copilot Money's API.

Requirements

  • Python 3.10+
  • macOS for browser token extraction (manual token entry works everywhere)
Usage Guidance
This skill is internally consistent with a Copilot Money CLI: it needs a refresh token and offers an auto-detect feature that reads browser IndexedDB on macOS and saves a token to ~/.config/copilot-money/config.json. Before installing or running it: 1) verify the copilot-money-cli package source (PyPI project page, repository, author) and inspect the code if possible; 2) prefer manual token entry if you do not want any tool scanning your browser storage; 3) run the CLI in an isolated environment (VM/container) if you are unsure; 4) check and restrict file permissions on the saved config file, and be prepared to revoke the refresh token from Copilot Money if needed; 5) avoid granting the skill or agent blanket access to your machine’s browser profiles or system if you don’t trust the package. Because this is an instruction-only skill that points to an external package, uncertainty about the third‑party code is the main reason confidence is not high.
Capability Analysis
Type: OpenClaw Skill Name: copilot-money Version: 1.1.2 The skill instructs the agent to install and utilize the `copilot-money-cli` tool. A key feature of this tool, as described in SKILL.md, is its ability to 'auto-detect' and read 'your browser's local IndexedDB storage to find your Copilot Money session token' for authentication. While the documentation claims this process is local and data is only sent to Copilot Money's API, the instruction to install and execute a tool with the capability to access sensitive browser storage for session tokens is a high-risk operation, classifying it as suspicious.
Capability Assessment
Purpose & Capability
Name/description match the runtime instructions: the SKILL.md documents a CLI that lists accounts, transactions, net worth and can refresh bank connections. Obtaining a Copilot Money refresh token (from the browser or manual entry) and storing a local config file is consistent with the described functionality.
Instruction Scope
The instructions tell the agent/user to run a third‑party CLI (copilot-money) and use commands like `config init` which will auto-detect a refresh token by reading browser IndexedDB on macOS. Reading browser storage is sensitive but is explicitly tied to acquiring the service token; the SKILL.md does not instruct the agent to read unrelated files or exfiltrate arbitrary data.
Install Mechanism
There is no platform install spec; SKILL.md instructs `pip install copilot-money-cli`. Installing a PyPI package is a reasonable delivery mechanism, but the package itself is external and not included in the skill bundle — you should verify the package's publisher/source before installing.
Credentials
The skill declares no environment variables, which is fine. However it relies on local credentials (a Copilot Money refresh token) that the CLI may extract from browser IndexedDB and stores config at `~/.config/copilot-money/config.json`. Access to browser storage and a persistent token file is sensitive but proportionate to the stated purpose.
Persistence & Privilege
always:false (normal). The CLI will persist a token/config file in the user's home config directory; writing its own config is expected, but this creates a persistent credential on disk that you should protect and consider when granting access.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install copilot-money
  3. After installation, invoke the skill by name or use /copilot-money
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.2
Match README structure and content
v1.1.1
Sync with CLI repo README - correct command name copilot-money
v1.1.0
Fix CLI command name to copilot-money, update flags
v1.0.0
Initial release
Metadata
Slug copilot-money
Version 1.1.2
License
All-time Installs 15
Active Installs 15
Total Versions 4
Frequently Asked Questions

What is Copilot Money Skill?

Query Copilot Money personal finance data (accounts, transactions, net worth, holdings, asset allocation) and refresh bank connections. Use when the user asks about finances, account balances, recent transactions, net worth, investment allocation, or wants to sync/refresh bank data. It is an AI Agent Skill for Claude Code / OpenClaw, with 2940 downloads so far.

How do I install Copilot Money Skill?

Run "/install copilot-money" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Copilot Money Skill free?

Yes, Copilot Money Skill is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Copilot Money Skill support?

Copilot Money Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Copilot Money Skill?

It is built and maintained by jayhickey (@jayhickey); the current version is v1.1.2.

💬 Comments