← 返回 Skills 市场
63
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install crypto-budget-boundary-planner
功能描述
A budgeting skill that helps set conservative crypto spending limits anchored to real life finances. Use when the user wants to define how much they can affo...
使用说明 (SKILL.md)
crypto-budget-boundary-planner
A budgeting skill that helps set conservative crypto spending limits anchored to real life finances.
Workflow
- Ask about emergency fund status, debt, monthly flexibility, and current stress level around money.
- Ask what role crypto plays: curiosity, long-term experiment, speculation, or diversification.
- Help the user define an affordable loss boundary and a monthly cap.
- Add pause rules for emotionally charged periods.
- Translate the result into a simple written policy.
Output Format
- Personal boundary summary
- Suggested monthly cap or zero-allocation recommendation
- Funding source rule
- Pause or stop conditions
- Review date
Quality Bar
- Grounded in personal finance reality, not market narratives.
- Conservative when income is unstable or debt is pressing.
- Easy to remember and follow.
- Makes room for saying "not now" when appropriate.
Edge Cases
- If the user has high-interest debt, no emergency buffer, or acute money pressure, lean toward delay or zero allocation.
- Cannot replace regulated financial advice.
Compatibility
- Prompt-only and region-agnostic at education level.
- Uses user-entered numbers or rough ranges.
- No portfolio sync or account integration.
安全使用建议
This skill's description says it's prompt-only, but the included handler.py tries to open /Users/jianghaidong/.openclaw/skills/{skill_name}/SKILL.md. Before installing or enabling it, either (1) ask the author why the code needs to read a hardcoded path and request removal of filesystem access, (2) inspect/run the code in a sandboxed environment, or (3) reject the skill. If you must test it, run it in an isolated VM/container and search for any other hardcoded paths or network calls. The current mismatch between the prose and the code is a privacy risk (local file reads) and should be resolved before use.
功能分析
Type: OpenClaw Skill
Name: crypto-budget-boundary-planner
Version: 1.0.0
The handler.py file contains a path traversal vulnerability in the _load_skill_meta function, which uses the unsanitized skill_name input to construct a filesystem path. Additionally, the code includes a hardcoded absolute path referencing a specific local user directory (/Users/jianghaidong/), which is highly irregular for a portable skill bundle and contradicts the 'Prompt-only' claim in SKILL.md.
能力标签
能力评估
Purpose & Capability
SKILL.md and the description present this as a prompt-only budgeting helper (no account integration, no I/O). However handler.py attempts to read a local SKILL.md from a hardcoded absolute path (/Users/jianghaidong/.openclaw/skills/{skill_name}/SKILL.md). Reading arbitrary files under a user's home directory is not necessary for the stated purpose and is disproportionate.
Instruction Scope
The runtime instructions (SKILL.md) never instruct reading local files or accessing the host filesystem. The included handler.py violates that scope by opening a host file path. This is hidden scope creep: the prose says "prompt-only" but code performs filesystem access.
Install Mechanism
There is no install spec (instruction-only), which is low risk normally, but this package includes Python code files. That means if the skill is loaded/executed, the embedded code will run despite no install steps being declared. There is no external download or suspicious installer URL.
Credentials
The skill declares no environment variables or credentials, yet the code attempts to access a specific filesystem location in a user's home directory (hardcoded username). Requesting or reading host-local files is not justified by the budgeting purpose and is disproportionate to the stated needs.
Persistence & Privilege
The skill does not request always:true and has no install hooks or claims to modify other skills or global settings. Autonomous invocation is allowed by default, but that alone is not an additional red flag here.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install crypto-budget-boundary-planner - 安装完成后，直接呼叫该 Skill 的名称或使用
/crypto-budget-boundary-planner触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of crypto-budget-boundary-planner.
- Guides users to set conservative crypto spending limits based on real-life finances.
- Prompts for emergency fund, debt status, financial flexibility, and stress level.
- Helps define personal loss boundary, monthly cap, and pause rules for emotional periods.
- Outputs a clear written policy with suggested caps and review dates.
- Prioritizes financial safety, especially for users with unstable income or pressing debt.
元数据
常见问题
Crypto Budget Boundary Planner 是什么？
A budgeting skill that helps set conservative crypto spending limits anchored to real life finances. Use when the user wants to define how much they can affo... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 63 次。
如何安装 Crypto Budget Boundary Planner？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install crypto-budget-boundary-planner」即可一键安装，无需额外配置。
Crypto Budget Boundary Planner 是免费的吗？
是的，Crypto Budget Boundary Planner 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Crypto Budget Boundary Planner 支持哪些平台？
Crypto Budget Boundary Planner 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Crypto Budget Boundary Planner？
由 haidong（@harrylabsj）开发并维护，当前版本 v1.0.0。
推荐 Skills