← 返回 Skills 市场
longziruo-max

Token Tracker Pro

作者 longziruo-max · GitHub ↗ · v2.2.0 · MIT-0
cross-platform ⚠ suspicious
119
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install token-tracker-pro-2026
功能描述
记录和追踪 OpenClaw 会话的 token 消耗,提供每日、每周和累计统计,并提出节省 token 的建议
安全使用建议
This skill's README asks you to install and run third-party CLI code but gives no source repository, no declared binaries, and no explanation of where token data comes from — that mismatch is suspicious. Before installing: (1) ask the publisher for a homepage or source repo and review the code; (2) verify what 'clawhub' is and whether it is a known/trusted package; (3) confirm what credentials or platform permissions the tool needs and where data is stored or sent; (4) prefer testing in a sandbox or isolated environment rather than doing a global npm install; (5) avoid granting secrets until you can audit the code and data flow. If the publisher cannot provide verifiable source or justification for the missing credentials/binaries, treat this skill as untrusted.
功能分析
Type: OpenClaw Skill Name: token-tracker-pro-2026 Version: 2.2.0 The skill bundle contains only metadata and documentation for a token tracking utility. There is no executable code, suspicious instructions, or evidence of malicious intent in the provided files (_meta.json and SKILL.md). The described functionality is consistent with its stated purpose of monitoring token consumption.
能力评估
Purpose & Capability
The skill claims to track OpenClaw session token usage, but the metadata declares no required binaries, no credentials, and no config paths. Practical token tracking would normally need access to session logs, an API, or platform usage metrics (and corresponding credentials); those are not declared, so the declared requirements are insufficient for the stated purpose.
Instruction Scope
SKILL.md tells the user/agent to run commands like 'token-tracker' and to 'npm install -g clawhub' then 'clawhub install token-tracker-pro-2026'. It does not explain where token data is read from, which credentials (if any) are needed, or whether data is sent to external endpoints. The instructions therefore give broad, vague authority to install/run external tooling without specifying dataflows or required permissions.
Install Mechanism
Although the registry entry has no install spec, the SKILL.md directs users to install a global npm package ('clawhub') and then use it to install the skill. That implies downloading and executing third-party code from npm and an unknown source. npm global installs modify the system and can run arbitrary code — this is a moderate-to-high risk unless the package and install source are verified. No homepage or repository is provided to audit.
Credentials
No environment variables, credentials, or config paths are declared, but token-tracking functionality would typically require access to account/session metrics or API credentials. The absence of declared secrets is suspicious (either the skill is incomplete or it would silently request/require credentials during runtime).
Persistence & Privilege
The skill is not marked 'always' and does not request special platform privileges. However, the suggested 'npm install -g' is a global installation that writes to system directories and persists code on disk, which increases risk if the source is untrusted. The skill metadata does not describe any self-modifying or cross-skill configuration, which is good.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install token-tracker-pro-2026
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /token-tracker-pro-2026 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v2.2.0
- Major refactor: streamlined documentation and simplified usage instructions. - Removed 21 documentation and source files, consolidating all info into SKILL.md. - Updated SKILL.md to a concise format with clear commands and install steps. - Project metadata added at the top of SKILL.md for easier identification. - Some feature details and technical stack info removed for brevity.
v2.1.1
Token Tracker Pro 2.1.1 - 完善了 SKILL.md,增加了详细功能、用法、快捷键说明及数据存储位置 - 详细列出各类统计/优化/推荐/仪表板等特性和命令行工具用法 - 新增 Web 仪表板启动、使用说明及功能特性说明 - 增加节省 token 的具体建议与注意事项版块 - 提供快捷键配置及跨平台支持说明 - 更新了安装方式与贡献指南信息
元数据
Slug token-tracker-pro-2026
版本 2.2.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Token Tracker Pro 是什么?

记录和追踪 OpenClaw 会话的 token 消耗,提供每日、每周和累计统计,并提出节省 token 的建议. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 119 次。

如何安装 Token Tracker Pro?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install token-tracker-pro-2026」即可一键安装,无需额外配置。

Token Tracker Pro 是免费的吗?

是的,Token Tracker Pro 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Token Tracker Pro 支持哪些平台?

Token Tracker Pro 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Token Tracker Pro?

由 longziruo-max(@longziruo-max)开发并维护,当前版本 v2.2.0。

💬 留言讨论