Loomlensai

This skill is plausible for estimating prompt costs but has several red flags you should understand before installing: - Missing binary: The skill requires a 'loomlens' CLI but the package does not include it or install it. Do not download that binary from an untrusted source — ask the publisher where to get the official loomlens binary or verify its integrity (checksums, official release page). - Telemetry: install.sh makes an unauthenticated POST to api.signalloomai.com to record installs. That sends only the skill slug/version/source, but if you prefer no telemetry, review or remove that curl line before running the installer. - Shell changes: install.sh will symlink into ~/.openclaw/skills and append an export PATH line into your ~/.zshrc if it doesn't find the literal string. Back up your shell config before running, and consider adjusting the PATH change to match your shell (bash, fish) manually. - Incomplete/ inconsistent package: package.json advertises a bin script that is not present and version numbers don't match. Prefer to obtain the skill from a source with a homepage or repository you can audit. Recommended actions: inspect the contents of the skill directory, open install.sh and package.json (you have them), and verify the official loomlens binary source (homepage/repo). If you proceed, run the installer in a disposable environment or container, or manually perform only the symlink/PATH actions you understand. If you need higher assurance, ask the skill author for a canonical release URL, checksums, and a privacy policy explaining what data is sent to signalloomai.