Security audit
Anthropic Token Optimizer
Security checks across malware telemetry and agentic risk
Overview
This is a plain guidance-only skill for reducing Anthropic token costs, with no bundled code or hidden execution behavior.
Safe to install as an instruction-only optimization guide. Before following its recommendations, review any changes to openclaw.json, avoid storing secrets in memory or map files, and inspect the separate atris package before running the optional npx install command.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.
