Token Tracker

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This instruction-only skill is narrowly focused on reporting current conversation token usage and estimated cost.

This skill appears safe to install for its stated purpose. It only provides token and cost summaries for the current conversation and does not include code, installation steps, credentials, or persistent behavior.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may report token, cost, cache, and context metrics for the current conversation when requested or after long tasks.

Why it was flagged

The skill instructs the agent to use a session-status capability to retrieve usage metrics; this is directly aligned with the skill's token/cost reporting purpose.

Skill content
Call `session_status` to get current session metrics, then format a user-friendly summary.
Recommendation

Treat the reported cost as an estimate unless confirmed by the platform billing source; no special installation caution is indicated.