No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by jeongwookie · Codex Skill · ★ 77
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is WhereMyTokens safe to install? View the security audit →
WhereMyTokens Claude Code, Codex, and Antigravity token usage, live in your Windows tray. 한국어 · 日本語 · 中文 · Español Download v1.18.2 · Features · Screenshots <p align="center
| Stars | 77 |
| Forks | 9 |
| Language | TypeScript |
| Category | Codex Skill |
| License | MIT |
| Quality Score | 61.9365284459048/100 |
| Open Issues | 1 |
| Last Updated | 2026-09-11 |
| Created | 2026-04-05 |
| Platforms | claude-code, cli, codex, node |
| Est. Tokens | ~20k |
Looking for a WhereMyTokens alternative? If you're comparing WhereMyTokens with other codex skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Ultra-fast token & cost tracker for LLM Token Usage (e.g. Claude Code)
macOS menu bar & Windows tray app pinning Claude Code, Codex & Antigravity quota, burn rate, and cost to your
Cross-platform desktop notifications for Claude Code, Codex, and Gemini CLI. Install via Homebrew, npm, or scr
Open-source OpenAI Codex alternative | Multi-agent desktop GUI for OpenCode | manage coding sessions, visualiz
Track and rotate your Claude & Codex usage across accounts from one live dashboard — read live, never spending
📊 Explore high-quality Claude skills focused on business analysis and content creation, enhancing your AI cap
Explore other popular codex skill tools:
WhereMyTokens is Local-first Windows tray app for monitoring Claude Code and Codex tokens, costs, sessions, and rate limits. It is categorized as a Codex Skill with 77 GitHub stars.
WhereMyTokens is primarily written in TypeScript. It covers topics such as ai-coding, anthropic, anthropic-claude.
You can find installation instructions and usage details in the WhereMyTokens GitHub repository at github.com/jeongwookie/WhereMyTokens. The project has 77 stars and 9 forks, indicating an active community.
WhereMyTokens is released under the MIT license, making it free to use and modify according to the license terms.
The top alternatives to WhereMyTokens on Agent Skills Hub include toktrack, usage, code-notify. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: