Back to skill
Skillv1.0.0

VirusTotal security

Model Usage · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 3:00 AM
Hash
53cbf744db283c5dc284463baa63c8403d050cc1c37e25422f347cd5a38fc50d
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: model-usage Version: 1.0.0 The skill's purpose is to summarize local cost data from the `codexbar` CLI tool. The `SKILL.md` instructs the agent to install `codexbar` via Homebrew cask, which is a standard package manager. The `scripts/model_usage.py` script executes `codexbar cost` using `subprocess.check_output` to retrieve local usage data, then parses and formats it. The script does not perform any network calls, access sensitive files (e.g., `~/.ssh`, `~/.aws`), or attempt to exfiltrate data. The `references/codexbar-cli.md` confirms that `codexbar cost` reads local logs. There are no prompt injection attempts in the markdown files that would lead to malicious actions. All operations are aligned with the stated purpose and lack high-risk behaviors or malicious intent.
External report
View on VirusTotal