Clawhub Skill Llm Cost Guard

• Analyzed: May 11, 2026, 4:42 AM
• Findings: 1
• Version: 1.0.0
• Hash: 101d39087d4ecf5ece489e8e8b3e8eee602c60175f213fac49ae6c025eda096f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill 'llm-cost-guard' is benign. Its `main.js` code uses only Node.js standard library modules (`fs`, `path`, `os`) to manage local configuration and data files within the `~/.openclaw/workspace/` directory. There are no external network calls, no use of `child_process` for arbitrary command execution, and no `eval` or `exec` of user-controlled input. The `SKILL.md` instructions are clear, directly related to cost monitoring, and do not contain any prompt injection attempts to subvert the agent's behavior for malicious purposes. The skill adheres to its stated purpose of LLM cost tracking without exhibiting any malicious intent or high-risk behaviors.