Ai Bill Clawhub

Do not run the included installer or setup scripts without manual review. Specific risks to consider: - The collector reads agent session files (/root/.openclaw/agents/...) and the OpenClaw config — these can contain sensitive runtime/session metadata; confirm you are comfortable with that access. - Installer.sh uses sudo to install systemd services and writes to system locations (/etc/systemd/system, /var/www/html). That gives persistent, privileged background processes; only allow if you trust the code and run it on an isolated host. - Several repository and path names are inconsistent (bill-project vs project-bill vs ai-bill etc.) and SKILL.md paths don't always match code. This could be sloppy or indicate copy-paste errors; it is a red flag — verify the canonical source repository and inspect it yourself. - The web UI includes weak client-side locking (hard-coded SECURE_CODE = "1234") and the collector writes usage to /var/www/html, which may expose billing/session data publicly without authentication. Recommendations: 1) Inspect the full code locally (collector.js, installer.sh, setup.js) before running anything. Search for all file reads/writes and network calls. 2) If you want to try it, run on an isolated VM/container (not your primary machine) and do not run installer.sh with sudo until you’ve audited the service unit files it would install. 3) Remove or change any code that writes usage to a public webroot, and protect the dashboard with a real server-side auth mechanism. 4) Confirm the authoritative GitHub repository and verify checksums/releases instead of piping curl|bash from an unknown URL. 5) If you cannot audit the code, prefer an alternative tool from a known, trusted source.