ratelint

Rate limiting & API throttling anti-pattern analyzer -- detects missing rate limits, brute force exposure, no backoff strategies, unbounded queues, retry sto...

This skill appears to do what it claims: local regex-based scanning for rate‑limit and throttling anti‑patterns. Before installing, note that: - It will attempt to install or use lefthook (brew lefthook) to add pre-commit / pre-push hooks; these hooks will run scans automatically and modify lefthook.yml in your repo. - Paid features require RATELINT_LICENSE_KEY; if not set, the skill will look in ~/.openclaw/openclaw.json for a stored key. If you keep other secrets in that file, be aware the skill reads it to extract ratelint.apiKey. - The scanner is entirely local and uses grep/regex patterns; expect false positives and potential performance impact on large repositories, especially when pre-push triggers a full scan. Recommendations: review the lefthook.yml changes before committing them, place your license key in the environment or in an appropriate config store you control, and run the scan manually on a small repo first to verify behavior. If you need stricter isolation, run the skill inside a disposable environment or CI job rather than enabling automatic hooks globally.

Type: OpenClaw Skill Name: ratelint Version: 1.0.0 RateLint is a static analysis tool for detecting rate-limiting and API throttling anti-patterns. The skill operates entirely locally using standard bash utilities like `grep` and `find` to scan codebases against a set of 90 regex patterns defined in `patterns.sh`. It includes legitimate features for CI/CD integration, report generation (HTML/JSON/Markdown), and Git hook management via `lefthook`. The license validation logic in `license.sh` is performed offline using JWT decoding and does not involve any telemetry or external network calls. The tool's behavior, including its access to the standard `~/.openclaw/openclaw.json` configuration file, is consistent with its stated purpose and lacks any indicators of malicious intent or data exfiltration.