37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

代码总体与“记录和统计 token 消耗”的描述一致，但该包会在用户主目录写入/修改配置并创建自启动/快捷脚本（未在元数据声明），存在持久化/权限变更与实现不一致的风险，建议人工审查并备份再安装。

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774423802803,
        "_id": "k97dqdm80n9at7b89zh0t5atss83k3h6",
        "changelog": "- 新增“Pro”版，升级名称为 token-tracker-pro\n- 更新文档结构，详细列出主要功能、使用方法、快捷键支持和数据存储说明\n- 引入智能模型配置推荐与优化建议，增强节省 token 的指导\n- 增加更多命令行和 npm script 操作（如导出、清理、重置等）\n- 详细描述 Web 仪表板和技术栈信息\n- 明确贡献及许可方式",
        "changelogSource": "auto",
        "createdAt": 1774423802803,
        "version": "2.2.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s1724h6drr1wg341c4z6rm0fg983hpy7",
        "displayName": "longziruo-max",
        "handle": "longziruo-max",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/261133763?v=4",
        "kind": "user",
        "linkedUserId": "kn77fm0nsk5e8n2beeefmma7hx8240k1"
    },
    "ownerHandle": "longziruo-max",
    "skill": {
        "_creationTime": 1774174847921,
        "_id": "kd7fj2sq68mhwxqtg5wqcg63ad83cpd7",
        "badges": [],
        "createdAt": 1774174847921,
        "displayName": "Token Tracker Pro",
        "latestVersionId": "k97dqdm80n9at7b89zh0t5atss83k3h6",
        "ownerPublisherId": "s1724h6drr1wg341c4z6rm0fg983hpy7",
        "ownerUserId": "kn77fm0nsk5e8n2beeefmma7hx8240k1",
        "slug": "token-tracker-pro",
        "stats": {
            "comments": 0,
            "downloads": 49,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 3
        },
        "summary": "记录和追踪 OpenClaw 会话的 token 消耗，提供每日、每周和累计统计，并提出节省 token 的建议",
        "tags": {
            "latest": "k97dqdm80n9at7b89zh0t5atss83k3h6",
            "optimization": "k97dqdm80n9at7b89zh0t5atss83k3h6",
            "pro": "k97dqdm80n9at7b89zh0t5atss83k3h6",
            "productivity": "k97dqdm80n9at7b89zh0t5atss83k3h6",
            "token": "k97dqdm80n9at7b89zh0t5atss83k3h6",
            "tracking": "k97dqdm80n9at7b89zh0t5atss83k3h6"
        },
        "updatedAt": 1774423912427
    }
}