plaid

plaid-cli a cli for interacting with the plaid finance platform. link accounts from various institutions, query balances, and transactions by date range listing accounts/balances.

This skill appears to wrap a Plaid CLI and is plausible for its stated purpose, but the metadata is incomplete: it does not declare the PLAID_* environment variables or the ~/.plaid-cli config/data path that the instructions require. Before installing, verify the upstream source (github.com/jverdi/plaid-cli), review the CLI's code/release to ensure it behaves as expected, and prefer installing the plaid-cli binary yourself rather than allowing an automated install. Store PLAID_CLIENT_ID and PLAID_SECRET securely (not in plain shell history), and avoid running commands that print access tokens (the SKILL.md warns about `plaid-cli tokens`). If the publisher updates the skill to explicitly declare required env vars and config paths and provides a verifiable homepage/repo, the coherence concerns would be resolved.

Type: OpenClaw Skill Name: plaid Version: 0.0.3 The skill bundle is benign. It provides instructions for installing and using `plaid-cli` to interact with the Plaid finance platform. The `SKILL.md` explicitly instructs the agent not to print or log secrets, which is a positive security indicator. All commands are standard for a CLI tool, involving local file operations (`/tmp` for state management) and `jq` for local data processing. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or obfuscation.