Token Monitor

• Verdict: Pass
• Confidence: High
• Analyzed: Feb 17, 2026, 9:30 PM
• Findings: 0
• Version: 1.0.3

Overview

The skill's files and instructions are coherent with a local quota-monitoring utility: it calls `openclaw models status`, parses percentages, writes a local state file, and suggests using cron/heartbeat for alerts — nothing requested is disproportionate to that purpose.

This skill appears to do what it says: run `openclaw models status`, detect low quotas, and write a local state file to avoid duplicate alerts. Before installing, review/confirm: (1) you are comfortable with the skill writing to ~/.openclaw/workspace/skills/token-monitor/.token-state.json (set QUOTA_STATE_FILE if you prefer another location); (2) alert delivery uses `openclaw cron wake`/heartbeat when integrated — that sends alert text into the OpenClaw notification system, so ensure you trust that delivery channel; (3) the script treats QUOTA_THRESHOLD as a plain variable and injects it into a jq program unescaped — if you plan to set QUOTA_THRESHOLD from untrusted input, sanitize/validate it first or patch the script to pass the value into jq safely (e.g., using --arg or --argjson); (4) the script exits with non-zero when new warnings exist — that is intentional but may cause monitoring systems to treat the job as failed. If any of these behaviors are unacceptable, review or modify the script before enabling automatic runs.