I think a disclosure and a way to limit the total cost would be appropriate. If agents are capable of making contributions back to GasTown independently then I think it makes sense that users of GasTown should have to contribute some tokens to maintaining and improving the library. This is actually the most sustainable approach to maintaining open-source software that we've seen so far, and might be a pattern for other libraries in the future.
That said... someone could also have their agents rip out this code or disable the functionality, so I doubt this is a serious inconvenience.
Except that this money does not go to the original open source developers whose work was stolen and plagiarized, but to the corporate fat cats who stole it.
You want to fatten the oligarchs by pretending this is open source and steal money from users?
Or disguise malicious behavior as an action that follows a routine prompt. E.g. sort a requirements file and make a typo.