← 返回 Skills 市场
Shelter
作者
Brian Palmer
· GitHub ↗
· v1.0.3
510
总下载
0
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install shelter
功能描述
Connect to your Shelter financial data. Check safe-to-spend, predict cash crunches, find zombie subscriptions, simulate purchases, get AI coaching, and ask G...
安全使用建议
This skill appears to be what it says: a read-only Shelter integration. Before installing: (1) Verify you trust the provider (shelter.money) and the package source (repository/homepage) since the package will copy files into ~/.claude/skills via postinstall. (2) Create a scoped API key in Shelter with the minimum permissions needed and set it as SHELTER_API_KEY in your environment; avoid embedding long-lived keys in code. (3) Be aware SKILL.md references SHELTER_API_URL (with a default) but doesn't declare it as required — if you use a non-default endpoint, set that env var explicitly. (4) Review or audit the install/uninstall scripts if you have stricter security needs; they only copy and remove files, but it's good practice to inspect any local postinstall behavior. (5) If you require higher assurance, test with a limited or read-only key and monitor Shelter's audit logs and your account for unexpected calls. If anything about the homepage, repository, or ownership looks unfamiliar, do not install and ask the provider for additional verification.
功能分析
Type: OpenClaw Skill
Name: shelter
Version: 1.0.3
The skill bundle is benign. All files, including `SKILL.md`, `install-skill.js`, and `package.json`, align with the stated purpose of providing a financial advisor skill. The `SKILL.md` instructions guide the AI agent on how to interact with the Shelter API and summarize responses, without any evidence of prompt injection attempting to subvert the agent's behavior, exfiltrate data, or execute unauthorized commands. The `install-skill.js` and `uninstall-skill.js` scripts perform standard file system operations to manage the skill's installation, and the `curl` commands in `SKILL.md` are well-defined, targeting the legitimate `api.shelter.money` domain for read-only financial data access, as explicitly stated in the security sections.
能力评估
Purpose & Capability
Name/description claim a read-only financial coaching integration with Shelter; required binary (curl) and a single credential (SHELTER_API_KEY) align with making authenticated HTTP calls to the Shelter API. The included README, SKILL.md, and data model reference consistently describe the same API and features.
Instruction Scope
SKILL.md instructs the agent to call specific Shelter endpoints with the X-Shelter-Key header and summarizes expected JSON fields — this stays within the stated purpose. One minor discrepancy: examples reference an optional SHELTER_API_URL environment variable (with a default), but that variable is not declared in requires.env; the default mitigates the risk, but the docs ask users to "confirm they're set" which could be clearer.
Install Mechanism
There is no remote download or package installation performed by the skill at runtime. The package contains a small install-skill.js that copies SKILL.md and the references directory into ~/.claude/skills (or a project-level path). This is typical for instruction-only skills; no external URLs, archives, or executables are fetched or executed beyond the local postinstall script.
Credentials
Only one credential is required (SHELTER_API_KEY) which is proportional to a hosted API integration. No unrelated secrets or broad system credentials are requested. Note: SKILL.md mentions an optional SHELTER_API_URL env var that isn't listed in the declared requirements.
Persistence & Privilege
always is false (normal). The install script writes skill files into the user's ~/.claude/skills directory, and uninstall removes them; it does not modify other skills or system-wide agent settings. The skill does not request elevated privileges or permanent forced inclusion.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install shelter - 安装完成后，直接呼叫该 Skill 的名称或使用
/shelter触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.3
- Changed all API base URLs from `shelterfinance.com` to `shelter.money`.
- Updated homepage metadata to use `https://shelter.money`.
- No changes to core endpoints or functionality; documentation and examples now reflect the new domain.
v1.0.2
- Updated documentation formatting and minor copyedits in SKILL.md for clarity.
- No functional changes to endpoints or API usage.
- Updated metadata in package files.
- No impact to end users or existing workflows.
v1.0.1
- Synchronize version numbering between skill metadata and documentation.
- No code logic or endpoint changes included.
v1.0.0
Shelter skill initial release
- Connect to your Shelter financial data for real-time insights and coaching.
- Check safe-to-spend, predict cash crunches, and simulate affordability.
- Discover zombie subscriptions and saving opportunities.
- Get AI-powered financial coaching and ask complex questions to Guardian AI.
- Read-only access to bank data via Plaid; secure and privacy-focused.
元数据
常见问题
Shelter 是什么？
Connect to your Shelter financial data. Check safe-to-spend, predict cash crunches, find zombie subscriptions, simulate purchases, get AI coaching, and ask G... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 510 次。
如何安装 Shelter？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install shelter」即可一键安装，无需额外配置。
Shelter 是免费的吗？
是的，Shelter 完全免费（开源免费），可自由下载、安装和使用。
Shelter 支持哪些平台？
Shelter 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Shelter？
由 Brian Palmer（@code-with-brian）开发并维护，当前版本 v1.0.3。
推荐 Skills