← Back to Skills Marketplace
419
Downloads
0
Stars
2
Active Installs
2
Versions
Install in OpenClaw
/install usage-tracker-clawhub
Description
AI Agent usage tracking and billing verification tool
Usage Guidance
Do not install or enable this skill without clarifying the billing setup: ask the author to (1) remove any hard-coded API key from source, (2) explicitly document required environment variables (SKILL_BILLING_API_KEY and SKILL_ID) and how they are used, and (3) prove ownership of the SkillPay.me account (or provide instructions to configure your own). If you proceed, run the skill in a sandboxed environment, verify that charges/payments go to your configured account, and rotate any secrets. Also verify the package repository/source (no homepage provided) and consider a code review for the hard-coded key and network interactions. Finally, note that Node <18 may not provide fetch by default; the code may fail or behave oddly depending on runtime.
Capability Analysis
Type: OpenClaw Skill
Name: usage-tracker-clawhub
Version: 1.0.1
The skill contains a hardcoded API key ('sk_2842f59e...') in index.js, which is a significant security vulnerability and could lead to unauthorized access or credential exposure. Additionally, the skill is designed to send user IDs and usage data to an external third-party endpoint (skillpay.me) for billing purposes; while this aligns with the stated functionality, the combination of hardcoded secrets and external data exfiltration to a non-standard payment gateway warrants a suspicious classification.
Capability Assessment
Purpose & Capability
Name/description match the code: the module implements usage tracking and SkillPay.me billing. Asking to integrate with a billing API is consistent with a billing/tracking skill. However, the package metadata and SKILL.md do not declare required environment variables (the code reads SKILL_BILLING_API_KEY and SKILL_ID), which is an inconsistency.
Instruction Scope
SKILL.md instructs users to run a setup command and to provide an API key, and the code calls out to skillpay.me endpoints for charge/balance/payment-link operations. That network activity is expected for billing, but the instructions and code disagree on environment variable names and defaults. The skill also performs network calls to an external payment API (skillpay.me), which will transmit user and billing params off-agent — this is expected for billing but merits caution.
Install Mechanism
No install script or remote download is present; the skill is instruction + Node code bundled in the package. No external installers or archive downloads are used, so install risk is low.
Credentials
The skill's code reads SKILL_BILLING_API_KEY and SKILL_ID from process.env but the registry metadata declares no required env vars. Worse, the code includes a long hard-coded default API key value in source. That is disproportionate and risky: embedding a secret in code can route charges or payment callbacks to the key owner without the user's consent. The skill also relies on a third-party payment service (SkillPay.me) which requires legitimate credentials to avoid misdirected funds.
Persistence & Privilege
The skill does not request elevated platform privileges, is not marked always: true, and does not modify other skills' configs. Autonomous invocation is allowed (platform default) but not combined with other massive privileges here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install usage-tracker-clawhub - After installation, invoke the skill by name or use
/usage-tracker-clawhub - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
添加真实 SkillPay.me API 集成，支持余额查询、充值链接、真实计费功能
v1.0.0
Usage Tracker 1.0.0 - Initial Release
- Introduced comprehensive AI Agent usage tracking and billing verification.
- Supports both free (basic tracking and reporting) and paid (detailed analysis, predictions, data export) usage scenarios.
- Integrated with SkillPay.me for payment management and OpenClaw Gateway for agent compatibility.
- Free tier includes daily usage limits; paid features are usage-based via transparent on-chain billing.
- Includes complete documentation with examples, commercial model, and technical setup guidance.
Metadata
Frequently Asked Questions
What is Usage Tracker?
AI Agent usage tracking and billing verification tool. It is an AI Agent Skill for Claude Code / OpenClaw, with 419 downloads so far.
How do I install Usage Tracker?
Run "/install usage-tracker-clawhub" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Usage Tracker free?
Yes, Usage Tracker is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Usage Tracker support?
Usage Tracker is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Usage Tracker?
It is built and maintained by jeterWang (@jeterwang); the current version is v1.0.1.
More Skills