← 返回 Skills 市场
andresubri

Wallet (By Budgetbakers)

作者 Carlos Andres · GitHub ↗ · v0.0.1
cross-platform ⚠ suspicious
624
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install wallet-api
功能描述
Interact with the BudgetBakers Wallet API for personal finance data. Use when the user needs to query accounts, categories, transactions (records), budgets,...
安全使用建议
The code and instructions look like a simple Wallet API wrapper and only need your WALLET_API_TOKEN. Before installing: (1) confirm the skill's source/homepage or maintainer since 'Source' and 'Homepage' are missing; (2) do not paste your real token publicly—ensure the token has limited scope and can be revoked; (3) ask the publisher or registry to update metadata to list WALLET_API_TOKEN as a required credential so the platform can handle it safely; (4) verify network traffic goes only to rest.budgetbakers.com if you need stronger assurance (the script currently only contacts that host). If you can't verify the publisher or metadata, treat this as higher risk and avoid installing until clarified.
功能分析
Type: OpenClaw Skill Name: wallet-api Version: 0.0.1 The skill is designed to interact with the BudgetBakers Wallet API, requiring a `WALLET_API_TOKEN` environment variable. The `scripts/wallet-api.sh` script correctly reads this token and constructs `curl` commands to a hardcoded API endpoint. Crucially, the script properly double-quotes the `$url` variable when calling `curl`, effectively preventing shell injection vulnerabilities from user-supplied query parameters. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts in any of the files. All components align with the stated purpose of querying personal finance data.
能力评估
Purpose & Capability
The skill's name, description, SKILL.md, and included script are coherent: they call BudgetBakers' Wallet API and require a bearer token. However, the registry metadata lists no required environment variables or primary credential while the SKILL.md and scripts clearly require WALLET_API_TOKEN. This metadata omission is inconsistent and should be corrected.
Instruction Scope
The runtime instructions and script are narrowly scoped to calling the BudgetBakers Wallet REST API endpoints. They only reference WALLET_API_TOKEN and do not read other system files, config paths, or contact unexpected endpoints.
Install Mechanism
This is an instruction-only skill with a small shell helper script and no install spec — low-risk from an installation perspective (no downloads or archive extraction).
Credentials
The script legitimately requires a single API token (WALLET_API_TOKEN) which is proportionate to the task. The concern is that the skill registry metadata does not declare this required secret; that mismatch could lead to accidental token disclosure or misconfiguration and prevents automated platforms from prompting for the credential properly.
Persistence & Privilege
The skill does not request persistent or elevated privileges (always:false) and does not modify other skills or system-wide settings. It only runs the included script when invoked.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install wallet-api
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /wallet-api 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.0.1
- Initial release of wallet-api skill to interact with the BudgetBakers Wallet API. - Supports querying accounts, categories, transactions, budgets, and templates through REST API commands. - Provides filter and pagination options for all list endpoints. - Includes setup prerequisites and quick start instructions. - Documents rate limits, data sync behavior, and example filter queries.
元数据
Slug wallet-api
版本 0.0.1
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Wallet (By Budgetbakers) 是什么?

Interact with the BudgetBakers Wallet API for personal finance data. Use when the user needs to query accounts, categories, transactions (records), budgets,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 624 次。

如何安装 Wallet (By Budgetbakers)?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install wallet-api」即可一键安装,无需额外配置。

Wallet (By Budgetbakers) 是免费的吗?

是的,Wallet (By Budgetbakers) 完全免费(开源免费),可自由下载、安装和使用。

Wallet (By Budgetbakers) 支持哪些平台?

Wallet (By Budgetbakers) 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Wallet (By Budgetbakers)?

由 Carlos Andres(@andresubri)开发并维护,当前版本 v0.0.1。

💬 留言讨论