Session Cost

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears purpose-aligned for local cost reporting, with the main caution that it reads local OpenClaw session logs and can recursively scan custom JSONL directories if asked.

This looks reasonable for checking OpenClaw API spending. Before installing, be aware that it reads local session logs across agents by default; use filters for narrower reports and be careful before sharing detailed, JSON, or Discord-formatted output.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Session logs can reveal historical agent activity, model usage, costs, timestamps, and session identifiers, even if the visible code focuses on metrics rather than message content.

Why it was flagged

The skill intentionally reads persistent OpenClaw session logs across agents to calculate usage and cost metrics.

Skill content
By default, scans all agents in `~/.openclaw/agents/`. Each agent's sessions are read from `~/.openclaw/agents/<name>/sessions/`.
Recommendation

Use the provided filters such as --agent and --offset when you want a narrower report, and avoid sharing detailed or JSON output if usage history or session identifiers are sensitive.

What this means

If a broad custom directory is supplied, the skill may process more local JSONL files than intended.

Why it was flagged

The script accepts a user-supplied path and recursively reads matching .jsonl files under that directory.

Skill content
args.path = argv[++i]; ... if (entry.isDirectory()) { walk(fullPath); } else if (entry.isFile() && entry.name.endsWith('.jsonl')
Recommendation

Only pass trusted, narrowly scoped directories to --path; prefer the default OpenClaw sessions location or explicit --agent/--offset filters for routine cost reports.