Back to skill
Skillv1.0.1
VirusTotal security
Cost Optimizer · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewMar 21, 2026, 9:31 AM
- Hash
- 287b5915077cb963f48450b477d5266545ce6ca3f338bdce475c1d454854c425
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: cost-optimizer Version: 1.0.1 The 'cost-optimizer' skill is designed to reduce AI token costs by implementing model routing, context compression, and heartbeat tuning. To achieve this, the skill (specifically in SKILL.md and index.ts) requires broad access to sensitive files, including reading and modifying global configuration files such as ~/.openclaw/config.json and ~/.claude/settings.json, which typically contain API keys and system-wide secrets. While the code is well-documented, includes safety features like configuration backups, and lacks clear evidence of malicious intent or data exfiltration, the capability to access and alter sensitive credentials and redirect user prompts to various third-party AI providers (e.g., DeepSeek, Google) constitutes a high-risk behavior that warrants a suspicious classification.
- External report
- View on VirusTotal