Is pfrederiksen/openclaw-cost-tracker safe?
Yes. pfrederiksen/openclaw-cost-tracker is safe to install. Oathe's behavioral security audit gave the openclaw-cost-tracker skill by pfrederiksen a trust score of 95/100 with 4 findings, none critical or high.
https://github.com/pfrederiksen/openclaw-cost-tracker
Is pfrederiksen/openclaw-cost-tracker safe to install?
OpenClaw Cost Tracker is a legitimate utility that parses local session files to provide cost and usage analytics for OpenClaw installations. The skill demonstrates no malicious behavior and operates transparently with documented data access requirements.
What security issues were found in pfrederiksen/openclaw-cost-tracker?
Category Scores
Findings (4)
INFO Transparent data access requirement -5 ▶
Skill description clearly states it needs access to OpenClaw session files for cost tracking functionality
MEDIUM Accesses user session data -10 ▶
Script reads JSONL files from ~/.openclaw/agents/ directory to analyze token usage and costs. This is documented, transparent, and necessary for the tool's functionality
INFO Standard Python script -2 ▶
Contains Python script that uses only standard library functions with no shell execution or external dependencies
LOW Could reveal usage patterns -15 ▶
While legitimate, the tool could potentially be used to analyze detailed AI usage patterns and costs, though this is its intended purpose
Should I install pfrederiksen/openclaw-cost-tracker?
Oathe's verdict for pfrederiksen/openclaw-cost-tracker is SAFE with a trust score of 95/100. Recommendation: Install.