← 返回 Skills 市场
spotsccc

Personal Finance Tracker

作者 Chernenko Ivan · GitHub ↗ · v0.5.0 · MIT-0
cross-platform ⚠ suspicious
82
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install spotsccc-finance
功能描述
Manage personal finances: record expenses, income, transfers, check balances, and generate reports. TRIGGER when: user asks to record a transaction, expense,...
安全使用建议
This skill appears to expect an external 'assistant' CLI that interacts with a PostgreSQL database, but the package metadata does not declare that dependency or any authentication details. Before installing or enabling it, verify: (1) what the 'assistant' CLI is, where it comes from, and that you trust it; (2) where the finance data will be stored (local DB, remote host) and whether DB credentials are required; (3) whether any local files (credentials, .env, keyrings) could be read by the agent via the allowed 'Read' tool. If you cannot confirm the CLI provenance and storage location, run this skill in a sandboxed environment or decline to install. If you proceed, restrict the agent's file access and avoid exposing DB credentials as environment variables to the agent until you verify the implementation.
功能分析
Type: OpenClaw Skill Name: spotsccc-finance Version: 0.5.0 The skill is a legitimate finance management tool designed to interact with a local 'assistant' CLI for PostgreSQL operations. It defines clear workflows for recording expenses, income, and transfers, and uses standard tools (Bash, Read, Grep) to execute these tasks. No indicators of malicious intent, data exfiltration, or prompt injection were identified in SKILL.md or _meta.json.
能力标签
cryptorequires-wallet
能力评估
Purpose & Capability
The SKILL.md explicitly requires running an external 'assistant' CLI to talk to a PostgreSQL store, yet the registry metadata lists no required binaries, no installation, and no environment variables/credentials. That is inconsistent: a finance tracker that reads/writes transactions normally needs a CLI binary or DB connection info. The skill source/homepage is unknown, so there is no place to verify what the 'assistant' CLI is or how it authenticates.
Instruction Scope
Runtime instructions are narrowly focused on finance operations (get-wallets, create-expense, spending-report) and do not ask to read arbitrary system files. However they instruct the agent to invoke an external CLI that will access stored financial data; there is no guidance on authentication, DB host, or what data the CLI will access. That leaves the agent discretion to use whatever local 'assistant' binary and credentials are available.
Install Mechanism
No install spec and no code files — instruction-only — so the skill itself will not write or fetch code. This lowers installation risk. The main risk stems from calling an external binary (the 'assistant' CLI) which is not declared.
Credentials
The skill declares no required environment variables or credentials, yet the SKILL.md implies access to a PostgreSQL-backed dataset via a CLI. That typically requires DB connection info or local credentials; asking for none is disproportionate. Also allowed-tools includes 'Read', which enables file reads; the agent could discover credentials from local files unless explicitly constrained.
Persistence & Privilege
The skill is user-invocable and not forced-always. It does not request persistent system privileges or declare modifications to other skills or system-wide settings. Autonomous invocation is enabled (default) but not combined with other high-risk flags.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install spotsccc-finance
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /spotsccc-finance 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.5.0
Initial release
元数据
Slug spotsccc-finance
版本 0.5.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Personal Finance Tracker 是什么?

Manage personal finances: record expenses, income, transfers, check balances, and generate reports. TRIGGER when: user asks to record a transaction, expense,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 82 次。

如何安装 Personal Finance Tracker?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install spotsccc-finance」即可一键安装,无需额外配置。

Personal Finance Tracker 是免费的吗?

是的,Personal Finance Tracker 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Personal Finance Tracker 支持哪些平台?

Personal Finance Tracker 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Personal Finance Tracker?

由 Chernenko Ivan(@spotsccc)开发并维护,当前版本 v0.5.0。

💬 留言讨论