Optimize and manage session tokens for workspace memory with commands to check usage, reset, index, search, and compress tokens.

This skill appears to do what it says (operate on local session files and call a compression/indexing CLI), but there are several red flags you should consider before installing or running it: - Do NOT run curl -sSL https://get.oktk.io | sh or any unattended install script without inspecting its contents first. The package includes a FRAMEWORK.md that suggests that script — treat it as untrusted until you review it. - Review the oktk project's source (the repo referenced in SKILL.md) and its npm package to ensure it's legitimate and that you trust running it on your machine. - The CLI will read your session files under ~/.openclaw/workspace-memory-builder/memory/*.md and will write an index under ~/.openclaw/workspace-memory-builder/.session_index/. If these files contain sensitive data, be aware the tool accesses them (this is expected for a token optimizer). - The included Python CLI has several issues/typos (a malformed import block, duplicated constants, and user-facing typos like "oktl" and a wrong npm install message) which suggest the code hasn't been well-tested. Expect runtime errors; inspect/execute the code in a safe environment (container/VM) first. - Because compress/index operations invoke external binaries and may run arbitrary commands (via oktk), avoid giving the agent automatic/autonomous permission to call these commands, or restrict usage until you've verified behavior. If you want to proceed: inspect the code locally, audit the oktk installer and package, run the tool in an isolated environment first, and back up any session data before running reset/confirm operations.

Type: OpenClaw Skill Name: broedkrummen-overkill-token-optimizer Version: 1.0.3 The skill is classified as suspicious due to a critical Remote Code Execution (RCE) vulnerability. The `cli.py` script executes an external `oktk` binary, whose path is determined by the `OKTK_BIN` environment variable (defined in `config.py`). If an attacker can control this environment variable (e.g., by setting `OKTK_BIN=/bin/sh`), they can execute arbitrary commands via the `token-optimizer compress <command>` functionality, as the user-supplied `<command>` is passed directly to the `subprocess.run` call. While the skill's stated purpose is benign, this vulnerability allows for unauthorized command execution.