Audit your OpenClaw cron job history and estimate how much you've spent on AI agents this week.

Do not install or run this skill until the following are clarified and fixed: (1) The package must include the jobaudit executable or the scripts/jobaudit entry referenced in package.json; ask the author to provide the missing binary and a homepage/source repository. (2) The metadata should declare any required environment variables (e.g., SL_API_KEY) and explain what scope and endpoints that key will access. (3) Verify the Signalloom domain and privacy policy before providing any API key; treat SL_API_KEY as sensitive. (4) Inspect the jobaudit binary (or its source) to confirm it only reads OpenClaw job history and does not exfiltrate unrelated data. (5) If you run install.sh, review it line-by-line first (it will modify ~/.zshrc and send an install POST in the background). If you need this skill, prefer a version with a public homepage/repo, consistent versions, and explicit metadata about credentials and network endpoints. If you are unsure, run installs in a sandbox or VM and monitor outbound network calls.

Type: OpenClaw Skill Name: jobaudit Version: 1.0.3 The installation script (install.sh) performs telemetry by sending a POST request to an external endpoint (api.signalloomai.com) and modifies the user's shell configuration (.zshrc). While the skill claims to audit local job history, the core execution logic (scripts/jobaudit) is missing from the provided files, preventing verification of whether sensitive job metadata is exfiltrated to the vendor's API, which is required for the 'audit' functionality.