Slash Tokens

CLI proxy that reduces LLM token consumption by 60-90%. Prefix any dev command with 'rtk' to get filtered, compact output. Use for all Bash commands to save...

Do not pipe the remote install script to bash without verification. Before installing: 1) Verify the canonical repository and install URL (Cargo.toml repository vs SKILL.md curl URL mismatch). 2) Inspect install.sh in that authoritative repo (or build from source) instead of running it directly. 3) Check telemetry & analytics code (src/core/telemetry.rs, scripts) and determine whether you can opt out; verify what endpoints it calls. 4) Be aware rtk stores a global history DB at ~/.local/share/rtk/history.db (contains raw outputs/estimates) and has commands to export/publish that data — treat it as potentially sensitive. 5) Note the hook auto-rewrite behavior: if you need guarantees the original command runs, use verbose/proxy modes or disable hooks; confirm defaults before using in CI or on machines with sensitive commands. If you want to proceed, prefer building/installing from a verified source (git clone the trusted repo and cargo build / inspect scripts) and audit the install.sh and telemetry endpoints first.

Type: OpenClaw Skill Name: slash-tokens Version: 0.34.3 The slash-tokens skill bundle is a CLI proxy utility designed to optimize LLM token usage by filtering and compacting command outputs. The code demonstrates strong security awareness, including a hook integrity verification system (src/hooks/integrity.rs) to detect tampering and a trust-gated model for project-local filter configurations (src/hooks/trust.rs) to prevent malicious repositories from manipulating what the AI agent sees. It also includes logic to specifically mask sensitive environment variables (src/cmds/system/env_cmd.rs). The telemetry is anonymized via salted hashing and is user-configurable. All behaviors are transparent and strictly aligned with the tool's stated purpose of cost reduction.