Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

토큰세이버 (한국어)

v1.0.0

한국어 Context DB로 AI 토큰 사용량을 최대 96% 절감하는 프롬프트 최적화 및 메모리 검색 도구입니다.

0· 105·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for dorongss/token-saver-kr.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "토큰세이버 (한국어)" (dorongss/token-saver-kr) from ClawHub.
Skill page: https://clawhub.ai/dorongss/token-saver-kr
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install token-saver-kr

ClawHub CLI

Package manager switcher

npx clawhub@latest install token-saver-kr
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill's code, SKILL.md, endpoints.json, and openclaw.skill.json all describe a remote memory/search API (api.tokensaver.ai) for reducing token usage; that matches the declared purpose. However, the package requires an API key to operate (TOKENSAVER_API_KEY or constructor param) but the registry metadata lists no required environment variables or primary credential. The absence of a declared credential in the registry is an incoherence.
Instruction Scope
SKILL.md instructs installing a pip package and using an API key from tokensaver.ai; the included Python code performs POST/GET requests to api.tokensaver.ai to save/search memories. That behavior is inside the stated scope (remote memory service). Note that all content saved by users will be transmitted to an external endpoint (tokensaver.ai) — expected for this service but important to surface.
Install Mechanism
There is no platform install spec (instruction-only skill), but SKILL.md tells users to pip install token-saver. The bundle also contains a local script entry (scripts/token_saver.py). This is not high-risk by itself, but you should verify the PyPI package identity (if you choose to pip install) and the origin of the included code. No downloads from unknown URLs or obfuscated installers were found.
!
Credentials
The Python code requires an API key (constructor or TOKENSAVER_API_KEY environment variable) and uses it as a Bearer token to call the external API. The registry metadata declares no required env vars or primary credential — a clear mismatch. The skill will not function without that secret, and the secret is used to authorize remote storage of user content; this should have been declared explicitly.
Persistence & Privilege
The skill does not request always:true and does not claim any special persistent system privileges. It does not modify other skills or system configs. Normal autonomous invocation is allowed by default.
What to consider before installing
Before installing: (1) Understand that this skill will send any saved content to api.tokensaver.ai — do not store sensitive secrets or private data there unless you trust the service and reviewed its privacy policy. (2) The packaged code requires an API key (TOKENSAVER_API_KEY or passing api_key) but the registry omitted that requirement — expect to provide a secret. (3) Verify the service/domain (https://tokensaver.ai) and the PyPI package identity if you plan to pip install; confirm pricing/limits and data retention. (4) If you need local-only token reduction, prefer tools that run entirely offline; otherwise limit what you save and rotate the API key regularly. (5) If you want higher assurance, ask the publisher for a homepage, privacy policy, and proof of ownership (repository or package listing) and request that the registry metadata be corrected to declare the required credential.

Like a lobster shell, security has layers — review code before you run it.

aivk97ac0vypsf4fhmpzwx38w9z6983h7cdkoreanvk97ac0vypsf4fhmpzwx38w9z6983h7cdlatestvk97ac0vypsf4fhmpzwx38w9z6983h7cdtoken-optimizationvk97ac0vypsf4fhmpzwx38w9z6983h7cd
105downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

토큰세이버 (TokenSaver)

AI 토큰 사용량 96% 절감!

한국어 Context DB로 긴 프롬프트를 짧은 검색으로 대체.

🎯 왜 필요한가?

상황기존토큰세이버
컨텍스트 전달1,500토큰~50토큰
메모리 검색전체 로드레벨별 검색
월 비용$100$4

96% 절감!

🚀 사용법

설치

pip install token-saver

기본 사용

from token_saver import TokenSaver

# API Key 설정 (무료: 50회/월)
ts = TokenSaver(api_key="your_key")

# 저장
ts.save("project/alpha", "이 프로젝트는...")

# 검색 (토큰 절약!)
result = ts.search("프로젝트 정보", level=0)  # 96% 절약

CLI

# 저장
token-saver save "memories/roadmap" --content "2026년 목표: 10억"

# 검색
token-saver search "목표" --level 0

# 사용량
token-saver usage

📊 검색 레벨

레벨토큰절감용도
0~5096%빠른 검색, 키워드만
1~20091%컨텍스트 파악
2~500+원본상세 작업

💰 요금제

플랜가격API 호출
Free$050회/월
Pro$9/월1,000회/월
Team$29/월무제한

🔑 API Key 발급

  1. https://tokensaver.ai 접속
  2. 회원가입
  3. API Key 발급

🇰🇷 한국어 특화

  • 형태소 분석 기반 검색
  • 한국어 비즈니스 템플릿
  • 한국 시간대 기반

토큰세이버 v1.0.0 AI 토큰 96% 절감!

Comments

Loading comments...