Expense Tracker

When user wants to track expenses, log spending, manage budgets, view spending reports, set savings goals, split bills, track income, view net savings, log r...

This skill appears to do what it says: store and manage expenses locally. Before installing, verify the agent runtime will not give this skill network access or additional tools (exec here allows arbitrary shell commands). Consider these steps: 1) Confirm the agent does not have network/networking tools or other elevated permissions that could transmit files. 2) Review the initial shell commands in SKILL.md (mkdir, for-loop, echo) to ensure they are acceptable in your environment. 3) Back up or encrypt financial JSON files if you store sensitive data. 4) Test in a sandbox or low-privilege account first to confirm behavior. If you need stronger guarantees that data never leaves the device, also confirm the platform enforces no-network and no-remote-exec policies for skills.

Type: OpenClaw Skill Name: smart-expense-tracker Version: 1.0.0 The OpenClaw AgentSkills bundle for 'smart-expense-tracker' is classified as benign. While it requests the high-risk `exec` tool (via `metadata.clawdbot.requires.tools`), the `SKILL.md` explicitly justifies its use for local file system management (e.g., `mkdir`, file initialization, and implied backup/cleanup operations) within the skill's dedicated `~/.openclaw/expense-tracker/` directory. The documentation strongly emphasizes that 'All data stays local,' 'Makes NO external API calls or network requests,' and 'Sends NO data to any server,' with no evidence of prompt injection designed to bypass these safety measures or exfiltrate data. The instructions consistently reinforce local-only operations and privacy, indicating no malicious intent within the skill itself.