glm-plan-usage

查询 GLM 编码套餐使用统计，包括配额、模型使用和 MCP 工具使用情况 | Query GLM coding plan usage statistics, including quota, model usage, and MCP tool usage

This skill largely does what it claims, but review and be aware of two issues before installing: - The script reads your OpenClaw config (~/.openclaw/openclaw.json) and extracts an API key for the detected provider; that key is included in Authorization headers and sent to https://open.bigmodel.cn. Verify you are comfortable with that provider receiving the key and that the key in your config is scoped appropriately. - The registry metadata lists no required credentials, which is inaccurate. Expect the script to require a provider entry with baseUrl containing api/coding/paas/v4 and an apiKey in ~/.openclaw/openclaw.json. - The script hardcodes API_BASE to https://open.bigmodel.cn rather than using the provider's baseUrl value; if you use a proxy/custom endpoint this may not work. Inspect scripts/query-usage.sh yourself (or run it in a safe environment) to confirm behavior before installing. If you have other sensitive API keys in your OpenClaw config, consider removing/isolating them or creating a separate provider entry with a limited-scope key just for monitoring.

Type: OpenClaw Skill Name: openclaw-glm-plan-usage Version: 1.0.1 The OpenClaw GLM Plan Usage skill is benign. It is designed to query GLM coding plan usage statistics from `open.bigmodel.cn` using `curl` and `jq`. The script `scripts/query-usage.sh` correctly reads the API key from `~/.openclaw/openclaw.json` and uses it to authenticate to the legitimate GLM API endpoints. There is no evidence of data exfiltration, unauthorized command execution, persistence mechanisms (beyond a suggested, benign cron job for monitoring), or prompt injection attempts in the `SKILL.md` or `README.md` files. All actions are aligned with the stated purpose.