OpenRouter Usage
v1.1.3Fetch real-time OpenRouter usage totals and historical per-model spend. Use when the user asks for usage, spend, cost breakdown, or OpenRouter stats. Not for system health or non-LLM metrics.
⭐ 1· 1.2k·3 current·3 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to fetch OpenRouter usage and per-model spend and the included script calls only openrouter.ai endpoints (/auth/key, /credits, /activity). However, registry metadata lists no required environment variables or primary credential while SKILL.md and the script do require OPENROUTER_API_KEY (and optionally OPENROUTER_MGMT_KEY). This mismatch is a metadata inconsistency (not functional misbehavior).
Instruction Scope
Runtime instructions and the Python script are narrowly scoped: they load credentials from environment or a credentials.env file in the skill directory, call OpenRouter endpoints, aggregate and print results. The instructions do not request unrelated files, system state, or external endpoints beyond openrouter.ai.
Install Mechanism
No install spec (instruction-only + a small script). Nothing is downloaded or written by an installer; risk from installation is low. The script may read credentials.env in the skill directory if present.
Credentials
The only secrets requested are OPENROUTER_API_KEY (required) and OPENROUTER_MGMT_KEY (optional) which are proportional to the stated functionality. Note: the registry metadata did not declare these required env vars or primary credential, while SKILL.md and the script do — this inconsistency should be resolved. The skill suggests storing keys in a credentials.env file in the skill directory (convenient but less secure than environment variables).
Persistence & Privilege
The skill does not request persistent system privileges, does not set always:true, and does not modify other skills or system-wide configs. It only reads a credentials.env file in its own directory (if present).
Assessment
This skill appears to do what it says: it uses OPENROUTER_API_KEY (and optionally OPENROUTER_MGMT_KEY) to call only openrouter.ai endpoints and print usage and model breakdowns. Before installing: (1) confirm you trust the skill owner/source (homepage is absent and owner ID looks unfamiliar); (2) prefer providing keys via environment variables rather than creating a credentials.env file in a shared filesystem; (3) be aware the registry metadata does not list the required env vars or primary credential — ask the publisher to correct that mismatch; (4) you can review scripts/stats.py yourself (it's small and readable) or run it in an isolated environment if you want to limit risk.Like a lobster shell, security has layers — review code before you run it.
latestvk97bkasxcajk2kzqd1r6ztegx1810kx2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.