← Back to Skills Marketplace
danielsinewe

OpenClaw Session Log Forensics

by Daniel Sinewe · GitHub ↗ · v0.2.0 · MIT-0
cross-platform ✓ Security Clean
125
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install openclaw-session-log-forensics
Description
Analyze OpenClaw session JSONL history for cost spikes, tool-call anomalies, and behavior regressions with jq + rg.
Usage Guidance
This skill appears coherent and performs only local log parsing. Before installing: (1) confirm jq and rg are installed and up-to-date; (2) verify the ~/.openclaw/agents/<agentId>/sessions/ path and agentId are correct; (3) be aware the commands will read all session logs (may contain sensitive or PII data) — only use with agents/users you trust; (4) if you want stricter control, run the recommended commands manually first to inspect outputs and then permit the skill to run them. If you need the skill not to run autonomously, restrict agent invocation policies even though always:false by default.
Capability Analysis
Type: OpenClaw Skill Name: openclaw-session-log-forensics Version: 0.2.0 The skill provides a set of utility commands using 'jq' and 'rg' to analyze local OpenClaw session logs for cost tracking and forensic analysis. All operations are confined to the local '~/.openclaw/' directory and serve the stated purpose of monitoring session history and tool usage without any indicators of data exfiltration or malicious execution.
Capability Assessment
Purpose & Capability
Name/description ask for JSONL session forensics and the skill only requires jq and rg and points to the OpenClaw session path — these binaries and the file paths are appropriate and proportional to the stated task.
Instruction Scope
SKILL.md contains concrete shell commands that only read and parse session JSONL files under ~/.openclaw/agents/<agentId>/sessions/ to compute costs, tool-call counts, and regressions. The instructions reference the agentId from the runtime/system prompt, which is reasonable for locating the correct session directory. There are no instructions to exfiltrate data or call external endpoints.
Install Mechanism
No install specification (instruction-only skill). This is lower-risk — nothing is downloaded or written to disk by the skill itself.
Credentials
The skill requests no environment variables, secrets, or external credentials. It accesses a local path containing session logs, which is consistent with the forensic purpose.
Persistence & Privilege
Skill is not always-enabled and uses default autonomous invocation settings. It does not request elevated persistence or modify other skills or system-wide settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install openclaw-session-log-forensics
  3. After installation, invoke the skill by name or use /openclaw-session-log-forensics
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.2.0
Add threshold-based anomaly flagger and compact per-session forensic snapshot output.
v0.1.0
Add OpenClaw-specific forensics workflows: daily tool-call volume, cost outlier scan, and two-session regression comparison.
Metadata
Slug openclaw-session-log-forensics
Version 0.2.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is OpenClaw Session Log Forensics?

Analyze OpenClaw session JSONL history for cost spikes, tool-call anomalies, and behavior regressions with jq + rg. It is an AI Agent Skill for Claude Code / OpenClaw, with 125 downloads so far.

How do I install OpenClaw Session Log Forensics?

Run "/install openclaw-session-log-forensics" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is OpenClaw Session Log Forensics free?

Yes, OpenClaw Session Log Forensics is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does OpenClaw Session Log Forensics support?

OpenClaw Session Log Forensics is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created OpenClaw Session Log Forensics?

It is built and maintained by Daniel Sinewe (@danielsinewe); the current version is v0.2.0.

💬 Comments