Subscription Sentinel

Subscription Sentinel — Your personal financial data agent. Sniffs email receipts, infers subscription cycles, and alerts or auto-cancels upcoming unwanted s...

This skill appears to do what it says — scanning recent receipts, inferring cycles, and storing results locally — but it requires access to your email and will read/write a local file (subscriptions.json). Before installing: 1) Ensure the email integration (AgentMail or similar) you grant is limited to the account and timeframe you want scanned. 2) Keep the skill in a trusted/sandboxed OpenClaw node and confirm where subscriptions.json will be stored; treat that file as sensitive and consider encryption or restricted filesystem permissions. 3) Be cautious granting browser/web-automation permissions: require explicit, per-action consent before any automated cancellation. 4) Review the skill's README and scripts/data_manager.md (present in the package) to confirm file-write behavior; the skill suggests using file I/O or shell exec to write the JSON — ensure the agent is not allowed to write outside the intended workspace. 5) Because the package source is unknown, prefer running it in a private or sandboxed environment first and audit the agent's actions during initial runs. If you need higher assurance, request a published source (repository) and author verification before using with real email accounts or production credentials.

Type: OpenClaw Skill Name: subscription-sentinel Version: 1.0.0 The skill requests high-privilege access to sensitive user data (emails) and browser control to automate subscription cancellations. While its behavior aligns with the stated purpose, it instructs the agent to use high-risk execution patterns for data persistence, specifically suggesting the use of shell commands (`exec` via `echo`) to manage `subscriptions.json` in `scripts/data_manager.md`. This creates a significant vulnerability where malformed or malicious content within an email receipt could lead to command injection or local file manipulation, though no clear evidence of intentional malice or exfiltration was found.