ClawHub

Token Tracker

v1.3.0

Track and report token usage and cost for conversations. Use when: (1) User asks about token consumption (e.g. "token用了多少", "花了多少钱", "how much did this cost"...

⭐ 0· 206·5 current·5 all-time
by@zty-f
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name and description match the SKILL.md instructions: it only aims to read session metrics and produce a formatted summary. It does not request unrelated credentials, binaries, or config paths.
ℹ
Instruction Scope
The instructions tell the agent to call session_status and format results. This stays within scope, but the skill implicitly depends on the platform providing a session_status method that exposes token/cost/cache/context metrics. If the platform exposes additional sensitive data via that API, the skill could surface it — the SKILL.md does not attempt to read files, env vars, or external endpoints.
✓
Install Mechanism
No install spec and no code files — instruction-only skills do not write to disk or fetch remote code, which is lowest-risk for installation.
✓
Credentials
No environment variables, credentials, or config paths are required. The declared requirements are proportionate to the stated purpose.
✓
Persistence & Privilege
Flags are default (always: false, agent can invoke autonomously). The skill does not request permanent presence or modify other skills; no elevated persistence or privileges are requested.
Assessment
This skill is instruction-only and appears coherent: it formats and reports metrics returned by an agent-provided session_status call. Before enabling, confirm your agent platform actually exposes session_status and that the data it returns is what you expect (tokens, cost, cache, context). The skill does not request credentials or install code, but pricing numbers in the SKILL.md are reference-only and may be outdated — verify pricing from your provider if accuracy matters. If you are concerned about privacy, test the skill on non-sensitive conversations to see exactly which fields it surfaces.

Like a lobster shell, security has layers — review code before you run it.

latestvk97a93m9r00x67rqew5q3znna9837t1j

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments