Back to skill
Skillv0.1.0
VirusTotal security
Claude Cost Cli · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 29, 2026, 3:46 AM
- Hash
- b5a7d79ab56edd4d2c5d9ddc5f07072ab74153c576f22adc0a0ca00dc832c956
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: claude-cost-cli Version: 0.1.0 The skill's `_meta.json` and `SKILL.md` files describe a legitimate CLI tool for querying Anthropic API usage and cost. The `SKILL.md` provides clear installation instructions using `npm install -g claude-cost-cli` and details about API key management (macOS Keychain), network activity (only to `api.anthropic.com`), and data handling (no persistence). While `npm install` can be a vector for supply chain attacks, the documentation is transparent, links to the open-source GitHub repository, and mentions provenance attestation, indicating a lack of malicious intent within the provided files. There is no evidence of prompt injection attempts against the AI agent or other indicators of malicious behavior.
- External report
- View on VirusTotal