Manage YNAB budgets, accounts, categories, and transactions.

Manage YNAB budgets, accounts, categories, and transactions via CLI.

What to consider before installing: - The SKILL.md expects you to install the ynab CLI (npm package @stephendolan/ynab-cli) and provide a YNAB_API_KEY. However, the registry metadata you were shown omitted those requirements — ask the publisher why, or prefer a skill whose declared requirements match its instructions. - Installing a global npm package runs third-party code on your system. Verify the package: check its npm page, GitHub repo, author, recent activity, and read the package source for anything unexpected before installing. - Only provide your real YNAB API key if you trust the package and environment. If possible, create a limited token or use a separate account for testing. - If you want to be cautious, run the npm package in a disposable environment (container/VM) and inspect what files it writes, whether it stores tokens locally, or whether it attempts network calls beyond the YNAB API. - If you plan to let an agent invoke this skill autonomously, remember that it could perform any CLI commands the installed ynab binary allows. Ensure the install and required env var are correctly declared in the registry or request clarification from the skill author before proceeding.

Type: OpenClaw Skill Name: ynab Version: 1.0.0 The skill bundle is benign. It provides instructions and examples for using the `ynab-cli` tool to manage YNAB budgets, accounts, and transactions. The `SKILL.md` file clearly defines the skill's purpose, required environment variables (`YNAB_API_KEY`), and installation steps (`npm i -g @stephendolan/ynab-cli`). All commands demonstrated are standard operations for a financial management CLI and show no evidence of data exfiltration, malicious execution, persistence, obfuscation, or prompt injection attempts against the AI agent.