LLM Cost Guard

• Analyzed: May 11, 2026, 4:41 AM
• Findings: 1
• Version: 1.0.0
• Hash: 1c5f3aaf6ff8f2d7cbe9b96db9c2f4033dffd2d46fd994cfd0da4ccbd0614101
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. The `main.js` script uses only Node.js standard library modules (`fs`, `path`, `os`) to manage local configuration and data files within the `~/.openclaw/workspace/` directory. There is no evidence of network communication, external process execution, or access to sensitive system files. The `SKILL.md` and `README.md` provide clear, non-malicious instructions for the OpenClaw agent, including a cron integration command (`openclaw cron add`) that aligns with the skill's stated purpose of sending reports, relying on the OpenClaw platform's capabilities for actual delivery. The explicit claims of 'Zero Dependencies' and 'No external services. No telemetry.' are verified by the code.