v1.0.0

Token Cost Monitor

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:26 AM.

Analysis

The skill is mainly cost-monitoring guidance with a harmless price-reference script, though users should notice optional examples that send cost summaries to Slack or email.

GuidanceThis appears safe to install as a cost-reference and cost-optimization guidance skill. Before using alert integrations, confirm where summaries will be sent and avoid exposing private spending or task information to untrusted channels.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Insecure Inter-Agent Communication

SeverityLowConfidenceHighStatusNote

SKILL.md

curl -X POST https://hooks.slack.com/services/YOUR/WEBHOOK/URL ... "Daily OpenClaw cost: $5.00 (Budget: $10.00)"

The skill documents optional webhook and email alert examples that would transmit cost summaries to external services if the user chooses to configure them.

User impactIf you follow the alert integration examples, spending information may be shared with Slack, Discord, or email recipients.

RecommendationOnly configure alerts to trusted destinations, avoid including sensitive task details in messages, and do not treat the local-only privacy statement as applying once you enable external alert examples.