Save upto 50% for model tokens: OpenAI GPT, Claude, Gemini, Qwen, Deepseek, Grok and more with one single key

• Analyzed: May 12, 2026, 3:32 AM
• Findings: 1
• Version: 1.0.1
• Hash: 8131e3f973d5c661e580b1c5502a03cbc40594faa3b7df01cb3ea825403051c9
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a client for the AIsa LLM Router API. The `SKILL.md` and `README.md` clearly document its purpose and usage, including required environment variables (`AISA_API_KEY`) and API endpoints (`https://api.aisa.one`). The `scripts/llm_router_client.py` Python script is a straightforward API client that makes HTTP requests to the declared AIsa API, using the provided API key. There is no evidence of data exfiltration beyond the necessary API key for its function, no malicious execution (e.g., `curl|bash`, `eval`), no persistence mechanisms, and no prompt injection attempts against the OpenClaw agent. All observed behaviors are consistent with the stated purpose of an LLM gateway client.