← 返回 Skills 市场
andreolf

Refund Radar

作者 Francesco · GitHub ↗ · v1.0.1
cross-platform ⚠ suspicious
2016
总下载
1
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install refund-radar
功能描述
Scan bank statements to detect recurring charges, flag suspicious transactions, and draft refund requests with interactive HTML reports.
安全使用建议
Key things to check before installing or running: 1) The skill bundle contains only docs, templates, and rules — it does not include the Python code the SKILL.md expects. Verify whether you (or your organization) already have a trusted 'refund-radar' Python package installed; if not, do NOT run arbitrary commands that fetch/execute code without reviewing it. 2) If you plan to install code from the referenced GitHub repo (https://github.com/andreolf/refund-radar), inspect that repository for network calls, telemetry, and how it handles CSV input and state storage before running it on real bank statements. 3) This tool will read sensitive financial data you provide and store analysis under ~/.refund_radar — ensure that location and file permissions meet your privacy requirements and that you back up or securely delete sensitive files when done. 4) The skill claims 'no network calls' — confirm the actual implementation enforces this (offline processing) before supplying real data. 5) The requirement to avoid apostrophes in generated text is odd but harmless; nevertheless, verify generated templates for correctness. If you cannot confirm the upstream code or are unwilling to audit it, treat this skill as untrusted and avoid providing real bank data.
功能分析
Type: OpenClaw Skill Name: refund-radar Version: 1.0.1 The OpenClaw AgentSkills skill bundle 'refund-radar' is classified as benign. All operations are explicitly stated to be local-first with no network calls or external APIs, a claim supported by the HTML/JavaScript which lacks any network requests. The SKILL.md instructions are clear, task-oriented, and do not contain any prompt injection attempts to manipulate the agent into malicious actions. File writes are confined to a dedicated `~/.refund_radar/` directory, and the Python component is stated to have no external dependencies, minimizing supply chain risks.
能力评估
Purpose & Capability
The skill claims to be a local-first bank-statement auditor, which fits the described inputs/outputs (CSV parsing, detection rules, HTML reports). However the SKILL.md repeatedly instructs running a Python module (python -m refund_radar) but this skill bundle contains no Python code or install mechanism. Either the skill is an instruction-only wrapper that assumes an external program already exists on the user's system, or the package is incomplete. That mismatch is disproportionate to the stated purpose and should be resolved.
Instruction Scope
Instructions reasonably limit scope to reading user-provided CSV/pasted transaction text and writing reports/state under ~/.refund_radar. SKILL.md explicitly states 'No network calls' and 'No external APIs'. There is no instruction to read other system files or access unrelated env vars. The main concern is that instructions delegate work to a local CLI that isn't provided; if the agent or user installs some other code to satisfy those commands, behavior may differ from what's described here.
Install Mechanism
There is no install spec in the skill bundle. The README/changelog and SKILL.md assert 'No external dependencies' and provide CLI usage for a python package, but the bundle lacks that code. That leaves two problematic possibilities: (1) the skill expects the user to separately install https://github.com/andreolf/refund-radar — which must be audited before use — or (2) the agent could try to fetch/execute code from elsewhere to satisfy the CLI, creating a risk. The absence of an included, verifiable install mechanism is a red flag.
Credentials
The skill requires no environment variables, no credentials, and does not request access to unrelated services. It writes persistent state to a user-scoped path (~/.refund_radar) which is proportional to its purpose. Templates include placeholders for card last-4 digits, but that's user-provided data rather than a requested secret.
Persistence & Privilege
The skill writes only to user-home paths (~/.refund_radar/state.json, reports), does not request system-wide changes, and is not configured as always:true. Persistent storage of learned preferences is reasonable for this use case. Confirm permissions and that the path is acceptable for storing sensitive summary data.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install refund-radar
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /refund-radar 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
- Added a CHANGELOG.md file for tracking changes. - Minor update clarifying the skill's description in SKILL.md (now starts with YAML front matter). - No functional changes to code or features.
v1.0.0
Initial release. - Parse CSV and text bank statements with auto-detection - Detect recurring subscriptions with cadence estimation - Flag duplicates, amount spikes, new merchants, fees - Generate refund request templates (email, chat, dispute) - Interactive HTML reports with dark/light mode and privacy toggle - Persistent state for learning merchant preferences - Zero external dependencies, fully local
元数据
Slug refund-radar
版本 1.0.1
许可证
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Refund Radar 是什么?

Scan bank statements to detect recurring charges, flag suspicious transactions, and draft refund requests with interactive HTML reports. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 2016 次。

如何安装 Refund Radar?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install refund-radar」即可一键安装,无需额外配置。

Refund Radar 是免费的吗?

是的,Refund Radar 完全免费(开源免费),可自由下载、安装和使用。

Refund Radar 支持哪些平台?

Refund Radar 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Refund Radar?

由 Francesco(@andreolf)开发并维护,当前版本 v1.0.1。

💬 留言讨论