ClawAudit verdict
ohmytoken
Sends only model name and token counts (3 fields) to ohmytoken.dev for visualization; explicitly states no prompts, responses, or secrets leave the machine, and source code is open.
⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis — not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Findings (4)
Possible hardcoded credential
SKILL.md · code · API_KEY="omt_paste_your_key_here
Accesses shell history/config
SKILL.md · prose · downgraded · ~/.zshrc
Instructs covert action — may act without user awareness
instructions.md · prose · downgraded · silently
Accesses sensitive environment variables
src/index.ts · prose · downgraded · process.env.OHMYTOKEN_API_KEY
Permissions & capabilities
No declared permissions — minimal attack surface.
Is this flag fair?
Thanks — recorded.