← 返回 Skills 市场
419
总下载
0
收藏
2
当前安装
2
版本数
在 OpenClaw 中安装
/install usage-tracker-clawhub
功能描述
AI Agent usage tracking and billing verification tool
安全使用建议
Do not install or enable this skill without clarifying the billing setup: ask the author to (1) remove any hard-coded API key from source, (2) explicitly document required environment variables (SKILL_BILLING_API_KEY and SKILL_ID) and how they are used, and (3) prove ownership of the SkillPay.me account (or provide instructions to configure your own). If you proceed, run the skill in a sandboxed environment, verify that charges/payments go to your configured account, and rotate any secrets. Also verify the package repository/source (no homepage provided) and consider a code review for the hard-coded key and network interactions. Finally, note that Node <18 may not provide fetch by default; the code may fail or behave oddly depending on runtime.
功能分析
Type: OpenClaw Skill
Name: usage-tracker-clawhub
Version: 1.0.1
The skill contains a hardcoded API key ('sk_2842f59e...') in index.js, which is a significant security vulnerability and could lead to unauthorized access or credential exposure. Additionally, the skill is designed to send user IDs and usage data to an external third-party endpoint (skillpay.me) for billing purposes; while this aligns with the stated functionality, the combination of hardcoded secrets and external data exfiltration to a non-standard payment gateway warrants a suspicious classification.
能力评估
Purpose & Capability
Name/description match the code: the module implements usage tracking and SkillPay.me billing. Asking to integrate with a billing API is consistent with a billing/tracking skill. However, the package metadata and SKILL.md do not declare required environment variables (the code reads SKILL_BILLING_API_KEY and SKILL_ID), which is an inconsistency.
Instruction Scope
SKILL.md instructs users to run a setup command and to provide an API key, and the code calls out to skillpay.me endpoints for charge/balance/payment-link operations. That network activity is expected for billing, but the instructions and code disagree on environment variable names and defaults. The skill also performs network calls to an external payment API (skillpay.me), which will transmit user and billing params off-agent — this is expected for billing but merits caution.
Install Mechanism
No install script or remote download is present; the skill is instruction + Node code bundled in the package. No external installers or archive downloads are used, so install risk is low.
Credentials
The skill's code reads SKILL_BILLING_API_KEY and SKILL_ID from process.env but the registry metadata declares no required env vars. Worse, the code includes a long hard-coded default API key value in source. That is disproportionate and risky: embedding a secret in code can route charges or payment callbacks to the key owner without the user's consent. The skill also relies on a third-party payment service (SkillPay.me) which requires legitimate credentials to avoid misdirected funds.
Persistence & Privilege
The skill does not request elevated platform privileges, is not marked always: true, and does not modify other skills' configs. Autonomous invocation is allowed (platform default) but not combined with other massive privileges here.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install usage-tracker-clawhub - 安装完成后，直接呼叫该 Skill 的名称或使用
/usage-tracker-clawhub触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
添加真实 SkillPay.me API 集成，支持余额查询、充值链接、真实计费功能
v1.0.0
Usage Tracker 1.0.0 - Initial Release
- Introduced comprehensive AI Agent usage tracking and billing verification.
- Supports both free (basic tracking and reporting) and paid (detailed analysis, predictions, data export) usage scenarios.
- Integrated with SkillPay.me for payment management and OpenClaw Gateway for agent compatibility.
- Free tier includes daily usage limits; paid features are usage-based via transparent on-chain billing.
- Includes complete documentation with examples, commercial model, and technical setup guidance.
元数据
常见问题
Usage Tracker 是什么？
AI Agent usage tracking and billing verification tool. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 419 次。
如何安装 Usage Tracker？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install usage-tracker-clawhub」即可一键安装，无需额外配置。
Usage Tracker 是免费的吗？
是的，Usage Tracker 完全免费（开源免费），可自由下载、安装和使用。
Usage Tracker 支持哪些平台？
Usage Tracker 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Usage Tracker？
由 jeterWang（@jeterwang）开发并维护，当前版本 v1.0.1。
推荐 Skills