PocketLens

Use when user wants to track expenses, scan receipts, upload card payment screenshots, categorize spending, record transactions, check spending summaries, vi...

This skill appears to do what it says: it uses the platform's vision tool to extract transactions and calls PocketLens APIs using POCKET_LENS_API_KEY. Before installing: (1) Ensure you trust pocketlens.app and are comfortable that transaction images and parsed financial details will be sent to that service; (2) Use a restricted API key with the minimum required scope (write permission only if needed) and rotate/revoke keys when appropriate; (3) Be aware that images are processed by the platform's vision/model tooling (may be sent to the provider), so avoid uploading extremely sensitive documents unless you accept that; (4) If you want extra safety, test with a non-production PocketLens account and verify the API URL is the official domain. The helper script itself contains no hidden endpoints or obfuscated behavior.

Type: OpenClaw Skill Name: pocketlens Version: 1.0.0 The skill presents a potential shell injection vulnerability in `SKILL.md` when instructing the AI agent to execute `node pocket-lens.mjs create-transaction '<JSON>'`. The JSON argument is constructed from potentially untrusted input (vision AI output or user messages). While the `SKILL.md` attempts to guide the agent to quote the JSON, and the `pocket-lens.mjs` script uses `JSON.parse()` (which is safe for JSON parsing), the intermediate step of passing an unvalidated, AI-generated string to a shell command is a known attack vector if the agent fails to properly escape shell metacharacters within the JSON string, potentially leading to arbitrary command execution.