OpenClaw Token Optimizer
v3.0.0Reduce OpenClaw token usage and API costs through smart model routing, heartbeat optimization, budget tracking, and native 2026.2.15 features (session prunin...
⭐ 28· 9.2k·84 current·89 all-time
byAsif@asif2bd
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (token optimization via context/model/heartbeat/budget) match the included scripts and docs. Optional docs reference multi-provider setups and example API key placeholders, but the executable scripts do not require or use external network calls by default.
Instruction Scope
Runtime instructions and scripts operate on the OpenClaw workspace (reading/writing ~/.openclaw/workspace and memory JSON files) which is expected for this purpose. Minor discrepancy: SKILL.md and SECURITY.md emphasize "no system modifications" and "no subprocess calls," yet the README and SKILL.md show explicit user actions that write files (cp to ~/.openclaw/workspace/HEARTBEAT.md) and the bundle includes a shell wrapper (scripts/optimize.sh) that launches the bundled Python scripts. These are local, user-invoked operations and not networked, but the SKILL.md phrasing is slightly over-broad.
Install Mechanism
No install spec (instruction-only) and code is bundled in the package. No downloads or external installers are run automatically. The scripts use only Python standard library and a small shell wrapper; .clawhubsafe provides SHA256 checksums for integrity.
Credentials
Registry declares no required env vars or credentials. Some scripts (model_router) will optionally detect provider API keys from environment to choose a default provider, but they do not send network requests. Documentation references API key placeholders only for optional multi-provider workflows — expected and proportionate.
Persistence & Privilege
Skill is not always-enabled and uses no elevated privileges. It writes and reads files only in the user's OpenClaw workspace (~/.openclaw/workspace), which is reasonable for configuration/state helpers. It does not modify other skills or system-wide settings autonomously.
Assessment
This skill appears to be what it claims: local Python utilities that read/write files under your OpenClaw workspace to recommend and apply token-saving patterns. Before installing: (1) Inspect the bundled scripts yourself (they're small and use only the Python stdlib); (2) verify the .clawhubsafe checksums after download; (3) be aware that running the optional optimize.sh or following the README's cp command will write files into ~/.openclaw/workspace (this is expected behavior for applying heartbeat templates and storing state); and (4) documentation mentions multi-provider setups and API key placeholders — those are optional and not used automatically. If you need absolute assurance, run the Python scripts directly instead of the shell wrapper and review the workspace files the scripts create.Like a lobster shell, security has layers — review code before you run it.
cost-savingsvk97fkdgfgprqb9h97d6xasx6m9821721latestvk97fkdgfgprqb9h97d6xasx6m9821721lazy-loadingvk97fkdgfgprqb9h97d6xasx6m9821721model-routingvk97fkdgfgprqb9h97d6xasx6m9821721productivityvk97fkdgfgprqb9h97d6xasx6m9821721token-optimizationvk97fkdgfgprqb9h97d6xasx6m9821721
License
MIT-0
Free to use, modify, and redistribute. No attribution required.