← 返回 Skills 市场
aiwithabidi

Ai Cfo

作者 aiwithabidi · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
830
总下载
0
收藏
3
当前安装
1
版本数
在 OpenClaw 中安装
/install ai-cfo
功能描述
Full AI Chief Financial Officer — connects Mercury Banking + Stripe into real-time business intelligence. Daily cash position, automated P&L, revenue trackin...
使用说明 (SKILL.md)

📊 AI CFO

Full AI Chief Financial Officer for Agent6ix LLC

Connects Mercury Banking + Stripe into real-time business intelligence. Daily cash position, automated P&L, revenue tracking, expense categorization, cash flow forecasting, burn rate alerts, and weekly financial reports.

Commands

Command Description
dashboard Full financial dashboard — balances, MRR, burn rate, runway
transactions Recent transactions with AI categorization
pnl P&L statement for any date range
cashflow Cash flow analysis with 30/60/90 day forecast
revenue Stripe revenue breakdown — MRR, new vs recurring, churn
expenses Categorized expenses with trends and anomaly detection
report Weekly/monthly executive financial report
budget Set and track budgets by category
runway Burn rate and runway calculation
invoice Outstanding Stripe invoices and aging

Environment Variables

Variable Required Description
MERCURY_API_TOKEN Yes Mercury Banking API token (read-only)
STRIPE_API_KEY Yes Stripe secret key (restricted, read-only)
OPENROUTER_API_KEY Yes For AI transaction categorization

Usage

python3 scripts/ai_cfo.py dashboard
python3 scripts/ai_cfo.py transactions --days 30
python3 scripts/ai_cfo.py pnl --start 2026-01-01 --end 2026-01-31
python3 scripts/ai_cfo.py cashflow
python3 scripts/ai_cfo.py revenue
python3 scripts/ai_cfo.py expenses --days 30
python3 scripts/ai_cfo.py report --period weekly
python3 scripts/ai_cfo.py budget --set Marketing 5000
python3 scripts/ai_cfo.py runway
python3 scripts/ai_cfo.py invoice

Daily Automation

# Add to cron for daily 8 AM brief
python3 scripts/cfo_cron.py

Data Storage

All data stored in .data/sqlite/cfo.db:

  • Categorized transactions
  • Budget allocations
  • Daily snapshots
  • Monthly P&L snapshots

Credits

Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.

📅 Need an AI CFO for your business? Book a free consultation

安全使用建议
Before installing: 1) Confirm the registry metadata omission — expect to provide MERCURY_API_TOKEN (or MERCURY_API_KEY), STRIPE_API_KEY, and OPENROUTER_API_KEY; only supply read-only / restricted Stripe and Mercury keys. 2) Review and control where the skill runs: it writes a local DB at .data/sqlite/cfo.db — store that in a directory with appropriate permissions and backups. 3) Consider running the skill in an isolated/staging environment first and restrict network access as needed. 4) Note the scripts call openrouter.ai (LLM) and will send transaction text there for categorization — if that contains sensitive customer data you may need to redact or avoid using the OpenRouter step. 5) The code will attempt to import a local Langfuse tracing helper if present (../../../tools/lf_trace) which could emit telemetry if your environment provides it — ensure you know whether such tooling exists and what it reports. 6) If you proceed, use least-privilege API keys, whitelist IPs on Mercury if possible, and rotate keys after testing.
功能分析
Type: OpenClaw Skill Name: ai-cfo Version: 1.0.0 The skill is classified as suspicious due to a potential local path traversal vulnerability in `scripts/ai_cfo.py`. It attempts to import `lf_trace` from `../../../tools`, which is an external path outside the skill's immediate directory. While this is for an optional tracing feature (Langfuse) and the code handles `ImportError` gracefully, relying on external files via relative path traversal introduces a supply chain risk. If the `../../../tools/lf_trace.py` file were compromised, the skill could execute malicious code from an untrusted source. All other network calls are to legitimate financial APIs (Mercury, Stripe) and an LLM service (OpenRouter) for the stated purpose, and `SKILL.md` does not contain prompt injection attempts against the agent.
能力评估
Purpose & Capability
Functionality (Mercury + Stripe + OpenRouter for categorization, local SQLite storage, cron automation) matches the 'AI CFO' description. However the registry metadata reported 'Required env vars: none' while the SKILL.md and both scripts clearly require MERCURY_API_TOKEN (or MERCURY_API_KEY), STRIPE_API_KEY and OPENROUTER_API_KEY. This metadata mismatch is an incoherence that could lead to missing security review or surprise prompts for credentials at runtime.
Instruction Scope
Runtime instructions and code are scoped to fetching data from Mercury and Stripe, calling openrouter.ai for categorization, storing results in .data/sqlite/cfo.db, and optionally running daily cron jobs. Nothing in SKILL.md or the code instructs reading unrelated system files. One caution: ai_cfo.py attempts to import a Langfuse tracing helper from ../../../tools/lf_trace if present — if that helper exists in the environment it will be used to trace API/LLM calls (potential telemetry).
Install Mechanism
No install spec is provided (instruction-only plus included Python scripts). There are no downloads or archive extraction steps in the package, so nothing arbitrary is fetched during install.
Credentials
The requested credentials (Mercury banking token, Stripe API key, OpenRouter API key) are proportionate to the stated functionality. The skill documents that Stripe/Mercury keys should be read-only/restricted. The inconsistency is that the registry metadata omitted these requirements even though the code enforces them (STRIPE and OPENROUTER are required via _env() in ai_cfo.py; Mercury token is required or falls back to alternative names).
Persistence & Privilege
The skill is not marked always:true and does not attempt to change other skills or system-wide agent settings. It persists data in a local SQLite DB at .data/sqlite/cfo.db (within the skill directory), and cron use is only suggested in documentation (user-driven).
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install ai-cfo
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /ai-cfo 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of AI CFO — automate and centralize financial intelligence for your business. - Integrates Mercury Banking and Stripe for real-time financial data. - Automated daily cash position, P&L statements, revenue and expense tracking. - Offers cash flow forecasting, burn rate/rate alerts, and runway calculations. - Includes categorized expense analysis, budget tracking, and anomaly detection. - Generates weekly/monthly executive reports and supports daily automation. - Stores financial data securely in a local SQLite database.
元数据
Slug ai-cfo
版本 1.0.0
许可证
累计安装 3
当前安装数 3
历史版本数 1
常见问题

Ai Cfo 是什么?

Full AI Chief Financial Officer — connects Mercury Banking + Stripe into real-time business intelligence. Daily cash position, automated P&L, revenue trackin... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 830 次。

如何安装 Ai Cfo?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install ai-cfo」即可一键安装,无需额外配置。

Ai Cfo 是免费的吗?

是的,Ai Cfo 完全免费(开源免费),可自由下载、安装和使用。

Ai Cfo 支持哪些平台?

Ai Cfo 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Ai Cfo?

由 aiwithabidi(@aiwithabidi)开发并维护,当前版本 v1.0.0。

💬 留言讨论