Cost Tracking for Models

• Analyzed: May 12, 2026, 3:09 AM
• Findings: 1
• Version: 1.0.2
• Hash: 942d9a7c7c501fa7612be96d35fccf921f78f7bd8bdc074a0221c48aa9e584c7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw Cost Tracker skill is benign. It is designed to parse local OpenClaw session log files (`~/.openclaw/agents/*/sessions/*.jsonl`) to generate usage cost reports. The `scripts/cost_report.sh` and `scripts/report_discord.sh` scripts use standard utilities like `jq`, `grep`, `date`, and `bc` to process data without making external network calls or attempting to access sensitive system files. The `cli.js` wrapper simply executes the shell script, and the `SKILL.md` and `README.md` files provide clear, non-malicious instructions for the agent, aligning perfectly with the stated purpose of cost tracking.