Token Watch

Track and analyze token usage and costs across AI providers with budget alerts, model cost comparison, optimization tips, and local data storage.

This package appears internally consistent with its stated purpose: a local-only token/cost monitor that needs no API keys. Before installing or enabling it for an agent, do the following: 1) Inspect the full tokenwatch.py file (and run it in a sandbox) to verify there are no network calls or unexpected behavior—while the imports shown are standard-library-only, you should confirm the truncated part of the shipped file is syntactically correct; 2) Be aware it writes usage and alerts to a .tokenwatch directory on disk—avoid recording sensitive prompt content there or protect the directory with file system permissions; 3) If you plan to pass provider response objects into the monitor, confirm those response objects do not themselves contain secrets you don't want stored; 4) Because the included file preview showed what looks like a truncated/typoed default (e.g., 'per_call_usd: Optional[float] = N'), run the package (or a linter) to ensure it runs without error—if an error exists, contact the maintainer or review the source on the linked repository before use. Overall this looks coherent and appropriate for the described function, but audit the shipped Python file and storage path before trusting it in production.

Type: OpenClaw Skill Name: token-watch Version: 1.2.3 The OpenClaw AgentSkills skill bundle 'token-watch' is classified as benign. The Python code (`tokenwatch.py`) strictly adheres to its stated purpose of tracking AI token usage and costs locally. It makes no external network calls, does not access sensitive system files or environment variables, and stores all data in a dedicated local directory (`.tokenwatch/`). The `SKILL.md` and `README.md` files contain no prompt injection attempts or instructions for the agent to perform actions outside the skill's described functionality. All claims of 'Zero telemetry', 'Local-only storage', and 'No API keys required' are verified by the code and manifest.