ClawCost

PassAudited by ClawScan on May 1, 2026.

Overview

ClawCost is a coherent local cost-reporting skill that reads OpenClaw session logs and writes a small local config file, with no evidence of external transmission or deceptive behavior.

This looks safe for its stated purpose. Before installing, be aware that it reads your local OpenClaw session logs to compute costs and can save balance settings in ~/.clawcost/config.json when you choose to set a balance.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the skill allows the agent to run this local script to calculate costs.

Why it was flagged

The skill operates by running a bundled local Python script. This is expected for its cost-reporting purpose and the included source does not show external downloads, obfuscation, or unrelated command execution.

Skill content
python3 {baseDir}/scripts/clawcost.py --budget 10
Recommendation

Use it if you are comfortable with the bundled script running locally and reading OpenClaw cost/session metadata.

What this means

The skill can inspect your local OpenClaw session log files, though the reviewed code only outputs aggregate costs, token counts, model breakdowns, dates, and the local username.

Why it was flagged

The script reads all JSONL session files under the current user's OpenClaw sessions directory to extract usage and cost fields. This is purpose-aligned and locally processed, but session logs can be sensitive.

Skill content
for filepath in glob.glob(str(sessions_dir / "*.jsonl")):
            with open(filepath, 'r') as f:
Recommendation

Install only if you are comfortable with a local cost tool reading OpenClaw session logs; keep session log directories protected from untrusted modification.