← Back to Skills Marketplace
Agent Optimizer by Drakon Systems
by
jarvis-drakon
· GitHub ↗
· v0.8.1
· MIT-0
75
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install drakon-agent-optimizer
Description
CLI tool that audits OpenClaw config files for misconfigurations, token waste, security issues, and stale auth. Reads local JSON config files only. No data l...
README (SKILL.md)
Agent Optimizer by Drakon Systems
Audit, optimize, and secure OpenClaw AI agent deployments.
70+ checks across 15 auditor modules. Free to install and run.
What It Reads (and doesn't)
Reads (local files only):
~/.openclaw/openclaw.json— model config, heartbeat, compaction, plugins~/.openclaw/agents/*/agent/auth-profiles.json— token expiry checks (does NOT extract or transmit keys)~/.openclaw/agents/*/agent/models.json— legacy override detection- Workspace
skills/,hooks/,extensions/— pattern-matched for billing/injection/obfuscation signatures
Does NOT:
- Send any data off-machine (no telemetry, no analytics)
- Store or prompt for API keys, SSH keys, or provider credentials
- Modify any files unless
--fixoroptimizeis run with a license (creates backup first) - Make network calls during audit/scan (only
activateandupdatetouch the network)
Fleet SSH Audit
The fleet --hosts command runs cat ~/.openclaw/openclaw.json over SSH on each listed host using your existing ~/.ssh/config entries. It does not store, copy, or prompt for SSH keys. Requires Fleet or Lifetime license.
Quick Start
npm install -g @drakon-systems/agent-optimizer
agent-optimizer audit # Free — 70+ checks
agent-optimizer scan # Free — malware + billing scan
agent-optimizer optimize --dry-run # Free — preview optimizations
Auditor Modules (15)
Model Config, Auth Profiles, Cost Estimator, Token Efficiency, Cache Efficiency, Bootstrap Files, Security Scanner, Plugins, Legacy Overrides, Tool Permissions, Provider Failover, Channel Security, Memory Search, Local Models, Security Advisories.
Pricing
| Tier | Price | Key Features |
|---|---|---|
| Free | £0 | Full audit, first 3 fix instructions, scan, preview |
| Solo | £29 | All fixes unlocked, auto-fix, optimize profiles |
| Fleet | £79 | SSH fleet audit, per-host comparison |
| Lifetime | £149 | Everything + 12mo updates + priority support |
Usage Guidance
This skill appears internally consistent, but it installs a third-party npm CLI and performs local scans (including optional SSH-based fleet reads). Before installing: 1) verify the npm package and GitHub/homepage URLs and publisher identity; 2) review the package code or its crate on a test VM if you cannot fully trust it; 3) be aware fleet mode will use your ~/.ssh keys to read remote OpenClaw files (ensure you intend that); 4) run in dry-run/audit mode first and inspect the generated snapshots and the locally stored license (~/.agent-optimizer/) to confirm behavior. If you need higher assurance, request the package source code or a signed release and audit it before running it against production configurations.
Capability Analysis
Type: OpenClaw Skill
Name: drakon-agent-optimizer
Version: 0.8.1
The skill bundle describes a CLI tool (@drakon-systems/agent-optimizer) that requires high-privilege access, including global NPM installation, reading sensitive OpenClaw configuration files (auth-profiles.json), and performing remote command execution via SSH for 'fleet audits.' While these capabilities are aligned with its stated purpose as a security and optimization auditor, the combination of remote execution, access to ~/.ssh/config, and external network calls for license activation (drakonsystems.com) presents a significant security risk if the underlying package is compromised or misused by the agent.
Capability Tags
Capability Assessment
Purpose & Capability
The name/description (OpenClaw config audit, token/security checks, optional fleet audit) aligns with the declared requirements: node>=20 and a global npm install of @drakon-systems/agent-optimizer. Requested config paths (openclaw JSON files, workspace skills/hooks/extensions) are appropriate for this purpose.
Instruction Scope
SKILL.md instructs the tool to read local config files and scan workspace code and mentions a fleet mode that runs 'cat ~/.openclaw/openclaw.json' via SSH using the user's ~/.ssh/config/keys. This is consistent with an audit tool, but scanning workspace/skills/hooks may access other sensitive files (tokens, credentials) — the skill claims not to transmit data, which is plausible but relies on the external npm package behaving as documented.
Install Mechanism
No local code included; install is 'npm install -g @drakon-systems/agent-optimizer' from the npm registry. This is a typical delivery for a CLI but does mean arbitrary third-party code will be installed at runtime — moderate-risk compared to instruction-only skills. The package and homepage URLs are declared; verify they match the publisher before installing.
Credentials
The skill requests no environment variables or credentials. It legitimately reads ~/.ssh/config and uses existing SSH keys for fleet audits and scans local config paths that may contain tokens. Access to those files is proportionate to an audit tool, but they are sensitive — the user should confirm the package will not exfiltrate data (the SKILL.md states a one-time license activation and npm update check only).
Persistence & Privilege
always:false (default) and no special persistence or system-wide configuration changes are requested. License and snapshots are stored under ~/.agent-optimizer; auto-invocation privileges are normal for skills and not elevated here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install drakon-agent-optimizer - After installation, invoke the skill by name or use
/drakon-agent-optimizer - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.8.1
Fix ClawHub scanner flags: declare config paths, credential policy, network calls, data handling, fleet SSH mechanism. No code changes.
v0.8.0
Initial ClawHub publish. 70+ checks, 15 auditor modules, cyberpunk CLI, security advisories, memory search, local model tuning.
Metadata
Frequently Asked Questions
What is Agent Optimizer by Drakon Systems?
CLI tool that audits OpenClaw config files for misconfigurations, token waste, security issues, and stale auth. Reads local JSON config files only. No data l... It is an AI Agent Skill for Claude Code / OpenClaw, with 75 downloads so far.
How do I install Agent Optimizer by Drakon Systems?
Run "/install drakon-agent-optimizer" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Agent Optimizer by Drakon Systems free?
Yes, Agent Optimizer by Drakon Systems is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Agent Optimizer by Drakon Systems support?
Agent Optimizer by Drakon Systems is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Agent Optimizer by Drakon Systems?
It is built and maintained by jarvis-drakon (@jarvis-drakon); the current version is v0.8.1.
More Skills