Skill Scoreboard

技能使用积分榜 v1.3 — OpenClaw 技能使用追踪与积分管理系统。 触发场景： (1) 用户询问技能使用榜单、积分统计（日榜/周榜/月榜/年榜/总榜） (2) 用户要求查看技能调用记录、错误日志 (3) 用户要求查看某技能的使用详情 (4) 用户要求生成每日/历史积分报告 (5) 用户询问"今天情况如何...

This skill appears to implement the advertised leaderboard functionality, but note two important issues before installing: (1) An undocumented script (scripts/parse_gateway_logs.py) will read gateway logs from /tmp/openclaw and extract message snippets, then call the tracker — that may capture and persist sensitive user messages; (2) the tracker scans your SharedSkills directory to compute complexity, which can expose file contents and file counts. Actions to consider: (a) inspect parse_gateway_logs.py and score_tracker.py yourself (they are included) and confirm you are comfortable with them reading /tmp/openclaw and SharedSkills; (b) if you want only manual tracking, avoid running parse_gateway_logs.py and do not enable any automated cron; (c) run the scripts in a restricted/sandboxed environment or limit file permissions for /tmp/openclaw and SharedSkills if you must; (d) ask the publisher to update SKILL.md to disclose automatic log parsing and provide opt-in/opt-out controls. If you need help reviewing specific lines or tailoring the scripts to avoid reading sensitive paths, provide guidance and I can suggest edits.

Type: OpenClaw Skill Name: skill-scoreboard Version: 1.3.0 The skill bundle implements a legitimate usage tracking and scoring system for the OpenClaw environment. It analyzes gateway logs in /tmp/openclaw to detect skill activity and calculates 'complexity weights' by scanning file metadata in the SharedSkills directory. All data is stored locally in ~/.skill_scoreboard, and no evidence of data exfiltration, unauthorized network access, or malicious command execution was found in scripts/score_tracker.py or scripts/parse_gateway_logs.py.