Latest release: v2026.5.28Download zip
Capabilities
Compatibility
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The stated purpose is exec/bash result compaction, and the code registers only an agent tool-result middleware for OpenClaw and Codex runtimes.
Instruction Scope
The plugin processes tool result content/details after commands run; README states it does not rewrite commands, rerun commands, or change exit codes.
Install Mechanism
Installation is through the OpenClaw plugin/npm package path with a locked dependency on tokenjuice 0.8.0; no install hooks or setup entry are declared.
Credentials
Access to tool result content and current working directory is proportionate to reducing noisy command output before it returns to the agent.
Persistence & Privilege
The manifest disables startup activation, provides no default enabled flag, declares no services, routes, bundled skills, or setup entry, and the inspected code shows no persistence or privilege escalation.
Scan Findings in Context
[SkillSpector] expected: SkillSpector reported no issues, which matches the small, purpose-aligned middleware implementation.
[StaticScan] expected: Static scan reported no suspicious patterns; artifact inspection likewise found no network calls, filesystem mutation, process spawning, credential access, or hidden hooks in the plugin code.
[VirusTotal] expected: VirusTotal telemetry was clean and is consistent with the artifact evidence, though it was not used as the sole basis for the verdict.
Assessment
This plugin will be able to read and rewrite command tool results before the agent sees them, so install it only if you want output compaction. The reviewed artifacts are official OpenClaw, opt-in, and do not show hidden persistence, outbound data transfer, or command execution beyond the declared middleware behavior.Verification
Tags
@openclaw/tokenjuice
Official Tokenjuice output compaction plugin for OpenClaw.
Tokenjuice compacts noisy exec and bash tool results after commands run, before the result is fed back into the active agent session. It does not rewrite commands, rerun commands, or change exit codes.
Install
openclaw plugins install @openclaw/tokenjuice
Restart the Gateway after installing or updating the plugin.
Enable
openclaw config set plugins.entries.tokenjuice.enabled true
Equivalent:
openclaw plugins enable tokenjuice
Docs
Package
- Plugin id:
tokenjuice - Package:
@openclaw/tokenjuice - Minimum OpenClaw host:
2026.5.28