← Back to Skills Marketplace
Shelter
by
Brian Palmer
· GitHub ↗
· v1.0.3
510
Downloads
0
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install shelter
Description
Connect to your Shelter financial data. Check safe-to-spend, predict cash crunches, find zombie subscriptions, simulate purchases, get AI coaching, and ask G...
Usage Guidance
This skill appears to be what it says: a read-only Shelter integration. Before installing: (1) Verify you trust the provider (shelter.money) and the package source (repository/homepage) since the package will copy files into ~/.claude/skills via postinstall. (2) Create a scoped API key in Shelter with the minimum permissions needed and set it as SHELTER_API_KEY in your environment; avoid embedding long-lived keys in code. (3) Be aware SKILL.md references SHELTER_API_URL (with a default) but doesn't declare it as required — if you use a non-default endpoint, set that env var explicitly. (4) Review or audit the install/uninstall scripts if you have stricter security needs; they only copy and remove files, but it's good practice to inspect any local postinstall behavior. (5) If you require higher assurance, test with a limited or read-only key and monitor Shelter's audit logs and your account for unexpected calls. If anything about the homepage, repository, or ownership looks unfamiliar, do not install and ask the provider for additional verification.
Capability Analysis
Type: OpenClaw Skill
Name: shelter
Version: 1.0.3
The skill bundle is benign. All files, including `SKILL.md`, `install-skill.js`, and `package.json`, align with the stated purpose of providing a financial advisor skill. The `SKILL.md` instructions guide the AI agent on how to interact with the Shelter API and summarize responses, without any evidence of prompt injection attempting to subvert the agent's behavior, exfiltrate data, or execute unauthorized commands. The `install-skill.js` and `uninstall-skill.js` scripts perform standard file system operations to manage the skill's installation, and the `curl` commands in `SKILL.md` are well-defined, targeting the legitimate `api.shelter.money` domain for read-only financial data access, as explicitly stated in the security sections.
Capability Assessment
Purpose & Capability
Name/description claim a read-only financial coaching integration with Shelter; required binary (curl) and a single credential (SHELTER_API_KEY) align with making authenticated HTTP calls to the Shelter API. The included README, SKILL.md, and data model reference consistently describe the same API and features.
Instruction Scope
SKILL.md instructs the agent to call specific Shelter endpoints with the X-Shelter-Key header and summarizes expected JSON fields — this stays within the stated purpose. One minor discrepancy: examples reference an optional SHELTER_API_URL environment variable (with a default), but that variable is not declared in requires.env; the default mitigates the risk, but the docs ask users to "confirm they're set" which could be clearer.
Install Mechanism
There is no remote download or package installation performed by the skill at runtime. The package contains a small install-skill.js that copies SKILL.md and the references directory into ~/.claude/skills (or a project-level path). This is typical for instruction-only skills; no external URLs, archives, or executables are fetched or executed beyond the local postinstall script.
Credentials
Only one credential is required (SHELTER_API_KEY) which is proportional to a hosted API integration. No unrelated secrets or broad system credentials are requested. Note: SKILL.md mentions an optional SHELTER_API_URL env var that isn't listed in the declared requirements.
Persistence & Privilege
always is false (normal). The install script writes skill files into the user's ~/.claude/skills directory, and uninstall removes them; it does not modify other skills or system-wide agent settings. The skill does not request elevated privileges or permanent forced inclusion.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install shelter - After installation, invoke the skill by name or use
/shelter - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.3
- Changed all API base URLs from `shelterfinance.com` to `shelter.money`.
- Updated homepage metadata to use `https://shelter.money`.
- No changes to core endpoints or functionality; documentation and examples now reflect the new domain.
v1.0.2
- Updated documentation formatting and minor copyedits in SKILL.md for clarity.
- No functional changes to endpoints or API usage.
- Updated metadata in package files.
- No impact to end users or existing workflows.
v1.0.1
- Synchronize version numbering between skill metadata and documentation.
- No code logic or endpoint changes included.
v1.0.0
Shelter skill initial release
- Connect to your Shelter financial data for real-time insights and coaching.
- Check safe-to-spend, predict cash crunches, and simulate affordability.
- Discover zombie subscriptions and saving opportunities.
- Get AI-powered financial coaching and ask complex questions to Guardian AI.
- Read-only access to bank data via Plaid; secure and privacy-focused.
Metadata
Frequently Asked Questions
What is Shelter?
Connect to your Shelter financial data. Check safe-to-spend, predict cash crunches, find zombie subscriptions, simulate purchases, get AI coaching, and ask G... It is an AI Agent Skill for Claude Code / OpenClaw, with 510 downloads so far.
How do I install Shelter?
Run "/install shelter" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Shelter free?
Yes, Shelter is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Shelter support?
Shelter is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Shelter?
It is built and maintained by Brian Palmer (@code-with-brian); the current version is v1.0.3.
More Skills