Scan Report
0 /100
agent-budget-controller
Control LLM API spending per agent with daily/weekly/monthly budget limits and alerts
This is a legitimate LLM budget tracking utility with zero external dependencies, no network access, and clean filesystem operations. All capabilities are accurately declared and the code performs exactly as documented.
Safe to install
No action needed. This skill is safe for distribution.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | WRITE | WRITE | ✓ Aligned | lib/config.py:39-42 writes config.json; lib/tracker.py:35-43 appends to usage.js… |
| Network | NONE | NONE | — | No urllib, requests, socket imports or network calls in entire codebase |
| Shell | NONE | NONE | — | No subprocess, os.system, or shell execution in scripts/budget.py |
| Environment | NONE | NONE | — | No os.environ access in any module |
| Skill Invoke | NONE | NONE | — | No skill invocation or inter-process communication |
| Clipboard | NONE | NONE | — | No clipboard access detected |
| Browser | NONE | NONE | — | No browser or web automation detected |
| Database | NONE | NONE | — | Uses JSON file storage only, no database connections |
2 findings
Info Email 邮箱地址
[email protected] EXAMPLE.md:447 Info Email 邮箱地址
[email protected] pyproject.toml:9 File Tree
16 files · 77.1 KB · 2768 lines Markdown 6f · 1712L
Python 9f · 1033L
TOML 1f · 23L
├─
▾
lib
│ ├─
__init__.py
Python
│ ├─
alerts.py
Python
│ ├─
config.py
Python
│ ├─
pricing.py
Python
│ ├─
reporter.py
Python
│ └─
tracker.py
Python
├─
▾
scripts
│ └─
budget.py
Python
├─
▾
tests
│ ├─
__init__.py
Python
│ └─
test_budget.py
Python
├─
COMPLETION_REPORT.md
Markdown
├─
EXAMPLE.md
Markdown
├─
INSTALL.md
Markdown
├─
pyproject.toml
TOML
├─
README.md
Markdown
├─
SKILL.md
Markdown
└─
SUMMARY.md
Markdown
Dependencies 1 items
| Package | Version | Source | Known Vulns | Notes |
|---|---|---|---|---|
stdlib-only | N/A | python | No | No external dependencies - uses only json, pathlib, datetime, collections, argparse, sys |
Security Positives
✓ Zero external dependencies - pure Python stdlib only
✓ No network access - all data stored locally in ~/.openclaw/budget/
✓ No shell execution or command injection vectors
✓ No credential harvesting or sensitive path access
✓ Clean, readable code without obfuscation
✓ SKILL.md accurately describes all functionality
✓ pyproject.toml correctly declares no dependencies
✓ Uses standard JSON file operations for local persistence