Scan Report
0 /100
proxy-token-optimizer
Optimize LLM token usage and API costs for openclaw-manager proxy platform
Legitimate token optimization skill with clean code, clear documentation, and no malicious behavior. All scripts perform their stated functions without hidden functionality.
Safe to install
This skill is safe for deployment. All behaviors are accurately documented and the code matches the stated purpose.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | READ | WRITE | ✓ Aligned | context_optimizer.py:117 writes AGENTS.md.optimized (documented in SKILL.md) |
| Network | NONE | NONE | — | No network calls in any script |
| Shell | NONE | NONE | — | No subprocess/shell execution in any script |
| Database | READ | READ | ✓ Aligned | usage_report.py and quota_advisor.py query PostgreSQL (documented in SKILL.md) |
| Environment | NONE | NONE | — | No os.environ iteration |
| Skill Invoke | NONE | NONE | — | No cross-skill invocation |
| Clipboard | NONE | NONE | — | No clipboard access |
| Browser | NONE | NONE | — | No browser access |
File Tree
8 files · 38.0 KB · 1178 lines Python 6f · 1012L
Markdown 1f · 161L
JSON 1f · 5L
├─
▾
scripts
│ ├─
cli.py
Python
│ ├─
context_optimizer.py
Python
│ ├─
heartbeat_config.py
Python
│ ├─
model_router.py
Python
│ ├─
quota_advisor.py
Python
│ └─
usage_report.py
Python
├─
_meta.json
JSON
└─
SKILL.md
Markdown
Security Positives
✓ No network requests - all instance-side scripts are purely local
✓ No shell execution or subprocess calls
✓ SQL injection protection via parameterized queries (sqlalchemy text() with bound params)
✓ Clear separation between instance-side (local) and platform-side (DB) scripts
✓ Documentation accurately reflects code behavior - no doc-to-code mismatch
✓ No credential harvesting or sensitive path access
✓ File writes are limited to generating AGENTS.md.optimized (documented behavior)
✓ No obfuscation techniques (no base64, eval, or encoded strings)
✓ Clean imports - only standard library and required dependencies (sqlalchemy, pathlib)