OpenClaw Cost Optimizer

PassAudited by ClawScan on May 10, 2026.

Overview

This skill mostly matches its stated cost-saving purpose, but it uses local OpenClaw setup commands, an OpenRouter key, and a local savings log, so users should review approval prompts carefully.

This appears to be a coherent OpenClaw/OpenRouter configuration helper, not malware. Before installing, make sure you are comfortable letting it add model aliases, create ~/.openclaw/cost-tracker.md, and use your OpenRouter account. Review each exec approval prompt instead of clicking through automatically.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Approving the commands can change the local OpenClaw model configuration.

Why it was flagged

The skill directs the agent to run local commands for setup. This is purpose-aligned for changing OpenClaw model aliases, but users should not treat approval prompts as automatic.

Skill content
“You have the exec tool. USE IT. Run every command yourself via exec. The user's only job is clicking ‘Approve’ on the exec popup.”
Recommendation

Review each exec approval popup and confirm it only adds or manages the intended OpenClaw model aliases.

What this means

A user may approve setup without noticing exactly what local changes are being made.

Why it was flagged

The wording downplays real local configuration changes and encourages quick approval, even though the skill adds aliases and creates a persistent tracker file.

Skill content
“Zero risk. Nothing to undo.” and “Just click Approve on each one.”
Recommendation

Treat the safety claims as marketing, and verify the files and aliases being changed before approving.

What this means

Using the configured models may spend OpenRouter credits or expose usage to OpenRouter under the user’s account.

Why it was flagged

The skill requires an OpenRouter API key, which is expected for OpenRouter model use. The provided artifacts do not show the key being logged, hardcoded, or sent to unrelated services.

Skill content
“requires: ... env: [‘OPENROUTER_API_KEY’]”
Recommendation

Use an OpenRouter key with appropriate spending limits and revoke or rotate it if you no longer use the skill.

What this means

A local file may reveal which models were used and estimated savings over time.

Why it was flagged

The skill persists a local record of model switches and savings estimates. This is aligned with its cost-tracking feature and does not show broad file indexing or external sharing.

Skill content
“This skill creates ~/.openclaw/cost-tracker.md to log model switches and savings estimates.”
Recommendation

Inspect or reset the tracker if you do not want model-switch history retained.