TokenQrusher

• Verdict: Pass
• Confidence: Medium
• Analyzed: Feb 18, 2026, 4:59 AM
• Findings: 0
• Version: 2.1.1

Overview

The skill appears to implement the stated local token‑optimization hooks (context filtering and heartbeat scheduling) and the requested binaries (node, python3) match the included code, but the repository contains leftover docs/config snippets referencing provider API keys and removed components — review those before enabling in production.

This package is generally coherent with its stated purpose and the included Node/Python code implements local hooks that filter context and throttle heartbeat checks. Before installing: 1) Review the hook config files (~/.openclaw/hooks/token-context/config.json and token-heartbeat/config.json) and test in dryRun mode to confirm behavior; 2) Inspect assets/config-patches.json and other docs for references to provider API keys or model overrides — do NOT paste credentials into your environment or apply gateway config patches without understanding consequences; 3) Back up your current hooks/gateway config and test in a non-production environment (or disable the hooks) to verify no unintended context removal; 4) Note some docs reference removed components and may be stale — prefer reading the actual hook handlers (hooks/*/handler.js) for authoritative behavior; 5) If you need higher assurance, run the package in a sandboxed account or request an independent code review for any further concerns.