ClawAudit verdict
agent-budget-controller
The skill appears to be a budget controller for LLM API spending, and its content focuses on setting budget limits, tracking usage, and alerting on thresholds, all of which are related to its legitimate stated purpose.
โ Flagged for review โ coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis โ not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Findings (2)
Accesses shell history/config
INSTALL.md ยท code ยท ~/.zshrc
References agent configuration files
lib/config.py ยท prose ยท downgraded ยท agent_config
Permissions & capabilities
Requires 2 system binaries.
credential_access Is this flag fair?
Thanks โ recorded.