Expense Report Pro

No more shoebox full of crumpled receipts at the end of the month. Snap a photo of any receipt — blurry, crumpled, foreign currency, handwritten tip — and Op...

This package appears internally consistent with an on-device expense tracker. Before installing, consider: 1) Playwright must be installed separately and will download browser binaries (Chromium) — verify you want that dependency. 2) The scripts write temporary HTML to /tmp and require read/write access to an expenses/ directory; the Python script validates output paths and escapes HTML, but you should run it under the user account that owns the expenses data. 3) SKILL.md and SETUP-PROMPT instruct secure permissions (chmod 700/600) and filename sanitization — follow those instructions to reduce risk. 4) If you later connect the dashboard to remote services (Supabase/S3), you'll need to supply credentials then — review and restrict those before providing them. 5) As with any third-party skill, inspect and (optionally) run the scripts in a sandbox or isolated environment first to confirm behavior. Overall, nothing in the package indicates unexplained exfiltration or mismatched permissions.

Type: OpenClaw Skill Name: normieclaw-expense-report-pro Version: 1.0.3 The Expense Report Pro skill is a well-structured tool for managing financial data with a strong emphasis on security. Key safety features include explicit prompt injection defenses in SKILL.md to prevent the agent from executing commands found in receipts, restrictive file permissions (chmod 600/700) established in SETUP-PROMPT.md, and robust input validation and HTML escaping in the PDF generation script (generate-expense-report.py). The use of Playwright for rendering reports is mitigated by disabling JavaScript execution, and the code follows best practices for local data handling without evidence of exfiltration or malicious intent.