功能描述

Query Copilot Money personal finance data (accounts, transactions, net worth, holdings, asset allocation) and refresh bank connections. Use when the user asks about finances, account balances, recent transactions, net worth, investment allocation, or wants to sync/refresh bank data.

使用说明 (SKILL.md)

Copilot Money CLI

Name: Copilot Money Skill
Author: jayhickey

Command-line interface for Copilot Money, a personal finance app. Authenticate once and query accounts, transactions, holdings, and allocation data from your terminal.

Note: This is an unofficial tool and is not affiliated with Copilot Money.

Install

pip install copilot-money-cli

Quick start

copilot-money config init
copilot-money accounts
copilot-money networth

Commands

copilot-money refresh                     # Refresh all bank connections
copilot-money accounts                    # List accounts with balances
copilot-money accounts --type CREDIT      # Filter by type
copilot-money accounts --json             # Output as JSON
copilot-money transactions                # Recent transactions (default 20)
copilot-money transactions --count 50     # Specify count
copilot-money networth                    # Assets, liabilities, net worth
copilot-money holdings                    # Investment holdings (grouped by type)
copilot-money holdings --group account    # Group by account
copilot-money holdings --group symbol     # Group by symbol
copilot-money holdings --type ETF         # Filter by security type
copilot-money allocation                  # Stocks/bonds with US/Intl split
copilot-money config show                 # Show config and token status
copilot-money config init                 # Auto-detect token from browsers
copilot-money config init --source chrome # From specific browser
copilot-money config init --source manual # Manual token entry

Authentication

Config stored at ~/.config/copilot-money/config.json. The CLI auto-detects your Copilot Money refresh token from supported browsers on macOS.

Auto-detect: copilot-money config init
Explicit source: copilot-money config init --source arc|chrome|safari|firefox
Manual entry: copilot-money config init --source manual

When using browser auto-detection, the CLI reads your browser's local IndexedDB storage to find your Copilot Money session token. This happens locally — no data is sent anywhere except to Copilot Money's API.

Requirements

Python 3.10+
macOS for browser token extraction (manual token entry works everywhere)

安全使用建议

This skill is internally consistent with a Copilot Money CLI: it needs a refresh token and offers an auto-detect feature that reads browser IndexedDB on macOS and saves a token to ~/.config/copilot-money/config.json. Before installing or running it: 1) verify the copilot-money-cli package source (PyPI project page, repository, author) and inspect the code if possible; 2) prefer manual token entry if you do not want any tool scanning your browser storage; 3) run the CLI in an isolated environment (VM/container) if you are unsure; 4) check and restrict file permissions on the saved config file, and be prepared to revoke the refresh token from Copilot Money if needed; 5) avoid granting the skill or agent blanket access to your machine’s browser profiles or system if you don’t trust the package. Because this is an instruction-only skill that points to an external package, uncertainty about the third‑party code is the main reason confidence is not high.

功能分析

Type: OpenClaw Skill Name: copilot-money Version: 1.1.2 The skill instructs the agent to install and utilize the `copilot-money-cli` tool. A key feature of this tool, as described in SKILL.md, is its ability to 'auto-detect' and read 'your browser's local IndexedDB storage to find your Copilot Money session token' for authentication. While the documentation claims this process is local and data is only sent to Copilot Money's API, the instruction to install and execute a tool with the capability to access sensitive browser storage for session tokens is a high-risk operation, classifying it as suspicious.

能力评估

✓ Purpose & Capability

Name/description match the runtime instructions: the SKILL.md documents a CLI that lists accounts, transactions, net worth and can refresh bank connections. Obtaining a Copilot Money refresh token (from the browser or manual entry) and storing a local config file is consistent with the described functionality.

ℹ Instruction Scope

The instructions tell the agent/user to run a third‑party CLI (copilot-money) and use commands like `config init` which will auto-detect a refresh token by reading browser IndexedDB on macOS. Reading browser storage is sensitive but is explicitly tied to acquiring the service token; the SKILL.md does not instruct the agent to read unrelated files or exfiltrate arbitrary data.

ℹ Install Mechanism

There is no platform install spec; SKILL.md instructs `pip install copilot-money-cli`. Installing a PyPI package is a reasonable delivery mechanism, but the package itself is external and not included in the skill bundle — you should verify the package's publisher/source before installing.

ℹ Credentials

The skill declares no environment variables, which is fine. However it relies on local credentials (a Copilot Money refresh token) that the CLI may extract from browser IndexedDB and stores config at `~/.config/copilot-money/config.json`. Access to browser storage and a persistent token file is sensitive but proportionate to the stated purpose.

ℹ Persistence & Privilege

always:false (normal). The CLI will persist a token/config file in the user's home config directory; writing its own config is expected, but this creates a persistent credential on disk that you should protect and consider when granting access.

版本历史

v1.1.2

Match README structure and content

v1.1.1

Sync with CLI repo README - correct command name copilot-money

v1.1.0

Fix CLI command name to copilot-money, update flags

v1.0.0

Initial release

元数据

Slug copilot-money

版本 1.1.2

许可证 —

累计安装 15

当前安装数 15

历史版本数 4

常见问题

Copilot Money Skill 是什么？

Query Copilot Money personal finance data (accounts, transactions, net worth, holdings, asset allocation) and refresh bank connections. Use when the user asks about finances, account balances, recent transactions, net worth, investment allocation, or wants to sync/refresh bank data. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 2940 次。

如何安装 Copilot Money Skill？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install copilot-money」即可一键安装，无需额外配置。

Copilot Money Skill 是免费的吗？

是的，Copilot Money Skill 完全免费（开源免费），可自由下载、安装和使用。

Copilot Money Skill 支持哪些平台？

Copilot Money Skill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Copilot Money Skill？

由 jayhickey（@jayhickey）开发并维护，当前版本 v1.1.2。

Copilot Money Skill