Tokenizer

• Verdict: Advisory
• Analyzed: Apr 16, 2026, 1:06 PM
• Findings: 0
• Version: 1.0.2
• Hash: afe9a286ee85fb96fa3e7a03982268012eec481041f7e78d98ea4d28d49e2f88
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: token-optimizer-skills Version: 1.0.2 The 'token-economy' skill bundle is a legitimate and well-documented suite for managing LLM context tokens. It includes functional scripts for token counting (count_tokens.py), skill metadata analysis (analyze_skills.py), and conversation distillation (distill_memory.py). The bundle uses a structured orchestration approach with a central configuration (orchestrator_config.json) and a dispatcher (skill_runner.py) to execute bundled Python scripts. While the scripts have the capability to read local files, this behavior is essential for their stated purpose of auditing and optimizing context. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found; in fact, the documentation includes explicit safety guardrails for high-risk operations like prompt compression.