Skill Vetter
一个面向 Security 场景的 Agent 技能。原始说明:Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
name: waste-audit
description: "Find recurring OpenClaw jobs that may be wasting tokens before the waste compounds. Read-only by default. Gives evidence and a copy-paste agent prompt for safe manual verification."
version: 1.8.12
platforms: [linux, macos, windows]
metadata:
hermes:
tags: [openclaw, tokensave, cron, waste, audit, tokens]
related_skills: []
For shared OpenClaw agents, install into the global managed skills directory:
openclaw skills install waste-audit --global
To upgrade an existing shared install:
openclaw skills install waste-audit --global --force
Then test with:
check openclaw waste
Primary activation phrase:
check openclaw waste
Do not use this for general OpenClaw setup, gateway debugging, provider configuration, or normal job management.
This skill is the OpenClaw-specific starting point for agent token waste auditing.
Use it when you want to inspect recurring OpenClaw jobs for possible token waste.
For broader model routing, sub-agent routing, fallback, retry, or cross-agent runtime analysis, use a separate Agent Routing Waste Audit workflow instead. This skill should not be treated as a generic routing optimizer.
1. Fix First
Include:
2. Top Waste Candidates
List up to 5 candidates.
For each candidate, include:
3. Manual Verification Prompt
A ready-to-copy prompt for your agent.
Please inspect this recurring OpenClaw job for possible token waste.
Job: <job name>
Reason it was flagged: <short reason>
Evidence: <schedule, runs checked, tokens used, error rate, delivery/summary signal>
Please verify whether this job is still useful.
Do not edit, disable, delete, or mutate anything yet.
First explain:
1. whether this is real waste,
2. what caused it,
3. the safest manual next step,
4. what evidence I should check before changing anything.
Redact secrets and do not expose private payloads.
If any candidate looks important but you are not sure whether it is real waste, send only the "Top Waste Candidates" section to @BeeGeeEth on X. Do not include secrets, API keys, private logs, wallet data, full config files, or production credentials.
If this audit finds a job where the main issue appears to be model choice, retry behavior, fallback behavior, or sub-agent routing rather than simple recurring job waste, run a separate routing audit before changing any model policy.
The next workflow should inspect:
<redacted>, <token>, or similar placeholders for anything that could identify a private resource.If waste-audit flags recurring token waste and you are not sure whether it is real, you can DM me on X: @BeeGeeEth.
Please send only:
Do not send secrets, API keys, private logs, wallet data, full config files, or production credentials.
I'll manually review a few safe examples and use the feedback to improve this skill.