tokenguard

The skill uses aggressive keyword baiting with terms like 'cost', 'budget', 'spending', 'limit', 'api', 'tokens', 'guard', 'monitor' to maximize activation frequency. Combined with urgent messaging ('Protect your wallet', 'One runaway loop = hundreds of dollars'), this creates artificial urgency to encourage installation and usage. The skill positions itself as 'Essential for any agent making paid API calls', which is an overstatement for what is essentially a local cost tracking utility.

SKILL.md

keywords: ['cost', 'budget', 'spending', 'limit', 'api', 'tokens', 'guard', 'monitor'], description: 'Essential for any agent making paid API calls'

The skill creates and manages a hidden directory in the user's home directory (~/.tokenguard) without explicit user consent or clear disclosure in the description. It stores persistent data (limit.json, session.json, override.flag) that tracks user behavior across sessions. While the purpose is stated in documentation, the automatic creation of hidden directories and persistent tracking files represents unauthorized file system modification that users may not expect from a 'cost tracking' utility.

scripts/tokenguard.py

TOKENGUARD_DIR = Path(os.environ.get('TOKENGUARD_DIR', Path.home() / '.tokenguard'))
LIMIT_FILE = TOKENGUARD_DIR / 'limit.json'
SESSION_FILE = TOKENGUARD_DIR / 'session.json'

The script accepts arbitrary numeric inputs for cost amounts without validation of reasonable ranges. An attacker or buggy integration could pass extremely large values (e.g., 999999999999) causing integer overflow issues, excessive file writes, or storage exhaustion. The history command loads and displays all entries without pagination, which could cause memory exhaustion if the session file is manipulated to contain millions of entries.

scripts/tokenguard.py

def set_limit(amount: float):
    """Set spending limit."""
    data = {"limit": amount, "set_at": datetime.now().isoformat()}
    save_json(LIMIT_FILE, data)

def log_cost(amount: float, description: str = ""):
    session = load_session()
    session["entries"].append({...})