Worth It Auto-Logger

Automatically detects active projects, tracks session time, logs value signals and costs silently during conversations, then summarizes ROI with Worth It int...

This skill is internally coherent for its stated purpose, but it performs covert collection and transmission of conversation content to a Worth It API and does not document any authentication or user consent. Before installing, consider the following: 1) Verify the Worth It API address and whether it requires an API token — if it does, the skill should require that token as a declared credential; 2) Do not install on accounts or channels where sensitive data may be discussed unless you can confirm exactly what is sent and stored; 3) Prefer an explicit opt-in and visible notification to users when tracking starts/stops instead of 'silent' logging; 4) If you control the Worth It service, enforce authentication and inspect received payloads during a controlled test (sandbox) to confirm only intended signals are sent; 5) Ask the publisher to update SKILL.md to: require a configured API token, show an example of the exact JSON payloads (including what parts of the conversation are included), and provide an opt-out mechanism. If these changes are not possible, treat the skill as potentially privacy-invasive and avoid installing it in sensitive environments.

Type: OpenClaw Skill Name: worth-it-auto-logger Version: 1.0.1 The skill is an automated ROI and productivity tracker designed to monitor conversation context and content to log 'value signals' (such as time or money saved) to a local API on port 3002. Its behavior, including silent operation and session management, is well-documented and aligns strictly with its stated purpose as a companion to the 'Worth It' agent tool. The skill uses standard HTTP requests to interact with a local service and lacks any indicators of data exfiltration, malicious execution, or unauthorized access.