← Back to Skills Marketplace
Token Tracker Pro
by
longziruo-max
· GitHub ↗
· v2.2.0
· MIT-0
119
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install token-tracker-pro-2026
Description
记录和追踪 OpenClaw 会话的 token 消耗，提供每日、每周和累计统计，并提出节省 token 的建议
Usage Guidance
This skill's README asks you to install and run third-party CLI code but gives no source repository, no declared binaries, and no explanation of where token data comes from — that mismatch is suspicious. Before installing: (1) ask the publisher for a homepage or source repo and review the code; (2) verify what 'clawhub' is and whether it is a known/trusted package; (3) confirm what credentials or platform permissions the tool needs and where data is stored or sent; (4) prefer testing in a sandbox or isolated environment rather than doing a global npm install; (5) avoid granting secrets until you can audit the code and data flow. If the publisher cannot provide verifiable source or justification for the missing credentials/binaries, treat this skill as untrusted.
Capability Analysis
Type: OpenClaw Skill
Name: token-tracker-pro-2026
Version: 2.2.0
The skill bundle contains only metadata and documentation for a token tracking utility. There is no executable code, suspicious instructions, or evidence of malicious intent in the provided files (_meta.json and SKILL.md). The described functionality is consistent with its stated purpose of monitoring token consumption.
Capability Assessment
Purpose & Capability
The skill claims to track OpenClaw session token usage, but the metadata declares no required binaries, no credentials, and no config paths. Practical token tracking would normally need access to session logs, an API, or platform usage metrics (and corresponding credentials); those are not declared, so the declared requirements are insufficient for the stated purpose.
Instruction Scope
SKILL.md tells the user/agent to run commands like 'token-tracker' and to 'npm install -g clawhub' then 'clawhub install token-tracker-pro-2026'. It does not explain where token data is read from, which credentials (if any) are needed, or whether data is sent to external endpoints. The instructions therefore give broad, vague authority to install/run external tooling without specifying dataflows or required permissions.
Install Mechanism
Although the registry entry has no install spec, the SKILL.md directs users to install a global npm package ('clawhub') and then use it to install the skill. That implies downloading and executing third-party code from npm and an unknown source. npm global installs modify the system and can run arbitrary code — this is a moderate-to-high risk unless the package and install source are verified. No homepage or repository is provided to audit.
Credentials
No environment variables, credentials, or config paths are declared, but token-tracking functionality would typically require access to account/session metrics or API credentials. The absence of declared secrets is suspicious (either the skill is incomplete or it would silently request/require credentials during runtime).
Persistence & Privilege
The skill is not marked 'always' and does not request special platform privileges. However, the suggested 'npm install -g' is a global installation that writes to system directories and persists code on disk, which increases risk if the source is untrusted. The skill metadata does not describe any self-modifying or cross-skill configuration, which is good.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install token-tracker-pro-2026 - After installation, invoke the skill by name or use
/token-tracker-pro-2026 - Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.2.0
- Major refactor: streamlined documentation and simplified usage instructions.
- Removed 21 documentation and source files, consolidating all info into SKILL.md.
- Updated SKILL.md to a concise format with clear commands and install steps.
- Project metadata added at the top of SKILL.md for easier identification.
- Some feature details and technical stack info removed for brevity.
v2.1.1
Token Tracker Pro 2.1.1
- 完善了 SKILL.md，增加了详细功能、用法、快捷键说明及数据存储位置
- 详细列出各类统计/优化/推荐/仪表板等特性和命令行工具用法
- 新增 Web 仪表板启动、使用说明及功能特性说明
- 增加节省 token 的具体建议与注意事项版块
- 提供快捷键配置及跨平台支持说明
- 更新了安装方式与贡献指南信息
Metadata
Frequently Asked Questions
What is Token Tracker Pro?
记录和追踪 OpenClaw 会话的 token 消耗，提供每日、每周和累计统计，并提出节省 token 的建议. It is an AI Agent Skill for Claude Code / OpenClaw, with 119 downloads so far.
How do I install Token Tracker Pro?
Run "/install token-tracker-pro-2026" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Token Tracker Pro free?
Yes, Token Tracker Pro is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Token Tracker Pro support?
Token Tracker Pro is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Token Tracker Pro?
It is built and maintained by longziruo-max (@longziruo-max); the current version is v2.2.0.
More Skills