Anthropic Usage
v1.0.7Query Anthropic Admin API for token usage reports (daily, weekly, monthly) with model breakdown. Requires an Anthropic Organization account. Configure your A...
⭐ 1· 105·0 current·0 all-time
byFelipe Leão@leaofelipe
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill name/description match the requested artifacts: it needs curl and jq and an Anthropic Admin API key, and includes a shell script that calls the Anthropic organizations usage_report endpoint. Nothing requested (binaries, env var) is unrelated to retrieving usage data.
Instruction Scope
The SKILL.md instructs the agent to check ANTHROPIC_ADMIN_API_KEY, run scripts/usage.sh, and (for cost estimation) fetch https://www.anthropic.com/pricing with the agent's web_fetch tool. The runtime instructions do not ask the agent to read unrelated files, exfiltrate data to third parties, or access unrelated credentials. The only external network calls described are to api.anthropic.com (usage API) and anthropic.com (pricing), which are consistent with the stated purpose.
Install Mechanism
No install spec is provided (instruction-only), and the repository only includes shell scripts and tests — there are no downloads from arbitrary URLs or extracted archives. This is low-risk from an install mechanism standpoint.
Credentials
The only required environment variable is ANTHROPIC_ADMIN_API_KEY (declared as primary). That is appropriate and proportionate for calling Anthropic's Admin API. The skill does not request other unrelated secrets or config paths.
Persistence & Privilege
The skill is not forced-always (always: false) and does not request elevated persistence or modification of other skills. It will run only when invoked.
Assessment
This skill appears to do exactly what it says: it uses your Anthropic Admin API key (sent only to api.anthropic.com) to fetch usage data and may fetch anthropic.com/pricing to estimate costs. Before installing or running: (1) Verify you provide an Admin API key (not a regular key) and that your account is on an Organization plan; (2) Inspect scripts/usage.sh locally if you want to confirm behavior — it uses curl and jq and follows pagination with sensible timeouts; (3) Be aware the agent will perform network calls to api.anthropic.com and anthropic.com when invoked (needed for functionality); (4) Ensure the OpenClaw web_fetch/tool used for pricing is restricted to anthropic.com as intended; (5) Do not paste your Admin key into untrusted places — use the OpenClaw UI key field or edit your local ~/.openclaw/openclaw.json if you understand the implications.Like a lobster shell, security has layers — review code before you run it.
latestvk971npp1eg4ymtgybt9bpx9k758376v9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📊 Clawdis
Binscurl, jq
EnvANTHROPIC_ADMIN_API_KEY
Primary envANTHROPIC_ADMIN_API_KEY
