Smart Expense Tracker Cn Payment

The description promises voice recognition, automatic classification, push reports, multi-user and paid tiers, but the skill is instruction-only with no code, no API endpoints, no required credentials, and no install spec. There is an internal metadata line saying it requires 'jq' (in SKILL.md) but the registry metadata lists no required binaries — this inconsistency suggests the skill cannot actually perform the claimed features as provided.

SKILL.md is essentially marketing and a manual payment flow (scan & send screenshot). It contains no concrete runtime instructions for how the agent should perform voice transcription, send push reports, store or retrieve user data, or verify payments. The payment flow requires users to send screenshots of payments for manual activation — a social-engineering risk and operationally unclear for an autonomous agent.

There is no install spec and no code files (instruction-only), so nothing will be downloaded or written to disk by an installer. This limits direct code-execution risk but also means promised features have no backing implementation in the package.

The skill requests no environment variables or credentials but claims features (voice recognition, push notifications, QQ integration, multi-user accounts) that would normally require service credentials, API keys, or backend access. Also, developer payment account info is embedded in the SKILL.md — not sensitive by itself, but unusual for a skill manifest and raises trust questions.

always:false and no install actions or declared config paths. The skill does not request persistent presence or system-wide configuration changes.