Token省钱管家

OpenClaw Token省钱管家 - 智能缓存、动态路由、实时监控，运行时自动优化，降低70%成本消耗。当用户询问成本优化、Token节省、缓存策略、模型路由或需要成本监控时使用。

This skill appears to be what it says: a local cost controller that stores state under .openclaw/data and detects local models with 'ollama list'. Before installing, consider: 1) Provenance — the package is from an unknown source and contains version metadata mismatch (files v2.1.1 vs registry v2.2.0); prefer packages from trusted authors. 2) Inspect repository locally — review install.js and the data files (controls.json, cache.json, cost-history.json) to ensure no unexpected behavior. 3) Data sensitivity — the skill will store usage/cost data and disabled/paused skill lists on disk; if that information is sensitive, run it in an isolated environment or change the dataDir. 4) Execution risk — it runs a fixed shell command to probe local models; this is expected but confirm your environment's PATH and that 'ollama' is trusted. 5) Network/credentials — the skill requests no credentials and makes no outbound network calls in the provided code, but if you modify it to integrate external alerting or telemetry, review that addition carefully. If you want higher assurance, run it in a sandbox or container and/or ask the author for a vetted release/source origin.

Type: OpenClaw Skill Name: token-cost-controller Version: 2.2.0 The skill bundle provides legitimate token cost management, caching, and model routing functionality for the OpenClaw agent. It implements statistical anomaly detection and local state management within a dedicated data directory. While it utilizes 'child_process.exec' in 'lib/model-router.js' to check for local 'ollama' availability, the command is hardcoded and does not incorporate unsanitized user input, posing no significant injection risk. No evidence of data exfiltration, malicious prompt injection, or unauthorized persistence was found.