Is model-usage safe to install?

SaferSkills independently audited model-usage (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

skills/ops/model-usage/SKILL.md · 1 file

skills/ops/model-usage/SKILL.md2.2 KB · Markdown

name: model-usage

description: Use CodexBar CLI local cost usage to summarize per-model usage for Codex or Claude, including the current (most recent) model or a full model breakdown. Trigger when asked for model-level usage/cost data from codexbar, or when you need a scriptable per-model summary from codexbar cost JSON.

metadata:

{

"openclaw":

{

"emoji": "📊",

"os": ["darwin"],

"requires": { "bins": ["codexbar"] },

"install":

[

{

"id": "brew-cask",

"kind": "brew",

"formula": "steipete/tap/codexbar",

"bins": ["codexbar"],

"label": "Install CodexBar (brew cask)",

}

Model usage

Overview

Get per-model usage cost from CodexBar's local cost logs. Supports "current model" (most recent daily entry) or "all models" summaries for Codex or Claude.

TODO: add Linux CLI support guidance once CodexBar CLI install path is documented for Linux.

Quick start

Fetch cost JSON via CodexBar CLI or pass a JSON file.
Use the bundled script to summarize by model.

python {baseDir}/scripts/model_usage.py --provider codex --mode current
python {baseDir}/scripts/model_usage.py --provider codex --mode all
python {baseDir}/scripts/model_usage.py --provider claude --mode all --format json --pretty

Current model logic

Uses the most recent daily row with modelBreakdowns.
Picks the model with the highest cost in that row.
Falls back to the last entry in modelsUsed when breakdowns are missing.
Override with --model <name> when you need a specific model.

Inputs

Default: runs codexbar cost --format json --provider <codex|claude>.
File or stdin:

codexbar cost --provider codex --format json > /tmp/cost.json
python {baseDir}/scripts/model_usage.py --input /tmp/cost.json --mode all
cat /tmp/cost.json | python {baseDir}/scripts/model_usage.py --input - --mode current

Output

Text (default) or JSON (--format json --pretty).
Values are cost-only per model; tokens are not split by model in CodexBar output.

References

Read references/codexbar-cli.md for CLI flags and cost JSON fields.

model-usage— agent skill

Is model-usage safe to install?

Model usage

Overview

Quick start

Current model logic

Inputs

Output

References

Audit the pieces. Scan the whole. Decide.