API Cost Tracker

This skill is inconsistent: the docs say it will read provider APIs, send webhook alerts, and use API keys, but the included script only simulates usage (creates demo entries and writes local JSON files). Before installing or providing any API keys: 1) Inspect scripts/main.mjs fully (and confirm whether it actually calls provider APIs or sends webhooks). 2) If you need real cross-provider tracking, ask the author for proof of implemented integrations or an updated release that actually uses the provider APIs securely. 3) Do not paste real API keys into config.json or environment variables unless you verify the code will use them as expected (and that network endpoints are legitimate). 4) If you plan to run automated jobs (cron/heartbeat), test in an isolated environment first. Confidence is medium because parts of the main script were truncated and tests expect exports that may not be present; additional information (full/main.mjs that includes API integration or explicit network code) would raise confidence and could change the verdict to benign if implementation matches documentation.