skill-stats

Query, analyze, and track all skill usage information. This skill should be invoked when users ask about skill usage, call counts, success rates, last used t...

This skill is coherent with its purpose, but it reads many local session and settings files under ~/.claude and ~/.openclaw which may contain sensitive conversation content or metadata. Before running: - Review the bundled scripts (already included) to confirm behavior (they only parse and aggregate invocation records and write local JSON files). - Be aware SKILL.md suggests using 'npx -y tsx', which will fetch the 'tsx' runner from npm if you don't have it; if you prefer, install/inspect tsx locally or run the scripts with your own node/ts runner. - If you have sensitive data in session files, consider running in a limited environment or backing up/removing sensitive sessions first. - Check the files the skill will create (~/.claude/skill-stats/*, ~/.openclaw/skill-stats/*) and their permissions after execution. - If you need stronger guarantees, run the scripts in a container or on a machine/user profile dedicated to diagnostics.

Type: OpenClaw Skill Name: skill-stats Version: 1.0.0 The skill performs automated analysis of sensitive AI session logs and configuration files located in `~/.claude` and `~/.openclaw` to generate usage statistics. While the logic in `stats-collector.ts` and `openclaw-stats-collector.ts` appears focused on extracting tool invocation data (e.g., call counts and success rates), the requirement to recursively read all historical conversation files (`.jsonl`) constitutes a significant privacy and security risk. No evidence of data exfiltration or intentional malice was found, but the broad file system access to private interaction history is a high-risk capability.