Budget Buddy Pro

Stop paying $100/year just to look at your own money. Budget Buddy Pro reads bank and credit card statements from any provider — Chase, Amex, your local cred...

This package appears to do what it says: local CSV parsing, auto-categorization, and local JSON storage. Before installing, consider the following: 1) PDF support is advertised but the included parser only accepts CSV — if you rely on PDF input, verify or add a safe PDF extractor. 2) The optional report generator uses Playwright/Chromium which can download browser binaries during installation — only enable it if you trust that behavior and are prepared for extra disk/network activity. 3) The setup prompt asks your agent to run shell commands that create files in your agent workspace; review the commands and run them in a directory you control (or test inside an isolated environment/container). 4) The skill stores highly sensitive financial data locally — enable disk encryption and consider filesystem backups and access controls on multi-user machines. 5) The package claims a security contact and an audit; treat those as advisory and inspect the scripts yourself (parse-statement.py and the install steps are short and readable). If you need PDF ingestion, external backups, or cloud sync, verify those features explicitly — they are not present in the code. Overall, the package is coherent and self-contained; proceed after the simple checks above.

Type: OpenClaw Skill Name: normieclaw-budget-buddy-pro Version: 1.0.3 Budget Buddy Pro is a well-structured financial management skill that demonstrates high security awareness. It includes explicit prompt-injection defenses in SKILL.md to prevent the agent from following instructions embedded in untrusted financial documents, and it enforces strict local file permissions (chmod 600/700) for sensitive data. The provided scripts (parse-statement.py and generate-budget-report.sh) perform localized data processing and report generation without any evidence of data exfiltration, obfuscation, or unauthorized network activity.