Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Agent Budget Controller
v1.0.0Control LLM API spending per agent. Set daily/weekly/monthly limits with real-time tracking and alerts.
⭐ 0· 117·0 current·0 all-time
byChloe Park@chloepark85
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The name, description, and included Python libraries (config/pricing/tracker/reporter) match the stated purpose of per-agent budget tracking. However the skill manifest declares the 'uv' binary as required while the codebase and README treat 'uv' as an optional installer helper; marking 'uv' as required is disproportionate. The package includes a pyproject.toml and CLI scripts (so an install is possible) which is consistent, but the 'zero dependencies' claim is slightly overstated because it still relies on a Python runtime and optional packaging tooling.
Instruction Scope
The SKILL.md and examples are mostly local-only, but several examples and cron/heartbeat integrations explicitly pipe reports to external channels (e.g., openclaw msg / Telegram, email, GitHub Actions). That directs potentially sensitive usage/cost data to external endpoints via the user's message tooling. Additionally the documentation contains a mixed message about enforcement: some places say 100% = 'blocked', but other sections and 'known limitations' state the tool only returns an exit code and does not automatically block calls — so callers must implement wrapper enforcement. These are functional and privacy-relevant inconsistencies that a deployer should understand before enabling automated flows.
Install Mechanism
This is an instruction-first skill with source files included (no remote downloads). There is no install spec in the manifest, and all files are local. The only oddity is the manifest metadata declaring 'uv' as a required binary; 'uv' appears only as an optional installer helper in INSTALL.md. No network-based installers or obscure URLs are used — install risk is low if you run the code locally.
Credentials
The skill requests no environment variables or credentials and stores data under a dedicated path (~/.openclaw/budget). That is proportionate for a local budget tracker. The only privacy concern is that examples show sending reports externally via separate tooling (openclaw message send / telegram / email), but those actions are performed by external commands the user configures, not the skill itself.
Persistence & Privilege
always:false and no special privileges are requested. The skill writes only to its own directory (~/.openclaw/budget/) and does not modify other skills or global agent settings. It does not request persistent elevated presence.
What to consider before installing
This skill appears to implement a local per-agent budget tracker as advertised, but check two things before installing:
1) Manifest vs docs: SKILL.md lists 'uv' as a required binary while INSTALL.md treats 'uv' as an optional installer tool. You only need python3 to run the CLI; 'uv' shouldn't be mandated at runtime. If you don't use 'uv', you can run scripts directly with python3.
2) Data egress in examples: Several examples/cron lines show piping budget reports to external message channels (Telegram, email, OpenClaw message send). The skill itself stores data locally, but those integration examples will transmit usage/cost data outside your machine. Only enable such integrations if you trust the destination and tooling.
3) Enforcement expectations: The docs are inconsistent about 'blocking' at 100% — the code and README indicate budget.check returns an exit code but does not automatically prevent LLM calls; you must wrap agent invocation (pre-call hook) to enforce blocks. If you need automatic enforcement, implement a wrapper that calls `budget check` and aborts when exit code != 0.
4) Quick checks to run locally before trusting it: inspect scripts/budget.py for subprocess or network usage, run the included tests (python3 tests/test_budget.py), and verify the files are written only under ~/.openclaw/budget/. If you want stricter privacy, avoid setting up cron/heartbeat lines that forward reports off-host.
Given these inconsistencies (manifest requirement for 'uv' and the presence of external-report examples plus mismatched enforcement claims), treat the skill as suspicious until you confirm the installer/CI/integration steps you plan to use and audit the CLI script for any unexpected network calls.Like a lobster shell, security has layers — review code before you run it.
latestvk978ctbyxdc54zfy7hm77qt9x18323a4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
💰 Clawdis
Binsuv, python3
