Telegram Usage Stats

• Analyzed: May 14, 2026, 3:04 AM
• Findings: 1
• Version: 1.0.1
• Hash: 2f4ed0d0cab9e071d481279465c7bb92694324a740949d02a51a6a0c60115a3e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to display session usage statistics. It uses `child_process.execSync` in `handler.js` to execute the `clawdbot models status` command, which is a legitimate interaction with the host system's `clawdbot` CLI for its stated purpose. It also reads and writes files within the `~/.clawdbot` directory (`quota-tracker.json`, `sessions.json`, `*.jsonl`) to gather and store session-related data, which is necessary for its functionality. There is no evidence of data exfiltration, malicious execution, persistence, or prompt injection attempts in `SKILL.md` or other files. All actions are aligned with the skill's described purpose.