Security audit
Security checks for vulnerabilities and agentic risk
This is a simple OpenClaw cost-auditing skill that reads OpenClaw-style logs to estimate token costs, with no evidence of hidden execution, persistence, exfiltration, or destructive behavior.
Before installing, note that the skill may be selected for generic API spend or token usage requests. Use it when you intend to audit OpenClaw logs, and review which log directory you pass because logs can contain operational or user activity data.
The trigger phrase on line 7 is generic enough that it could activate on routine user requests about billing or API spend rather than only for this specific skill. Overly broad activation can cause unintended tool selection, exposing logs, billing data, or cost-analysis actions in contexts where the user did not explicitly request this skill.
The trigger phrase on line 8 overlaps with common requests for usage or spend reporting, which increases the chance of accidental activation outside the intended OpenClaw billing context. In a skill that parses logs and queries API metrics, mistaken activation can lead to unnecessary access to operational or financial data and confused-deputy behavior.
No suspicious patterns detected.
