Edge Router

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This instruction-only skill is coherent for routing compute jobs, but using its execute API would send task payloads to an external service and possibly paid backends.

This skill appears benign and purpose-aligned as an instruction-only router for compute backends. Before installing or using it, treat the execute endpoint as a real external action: do not submit private prompts, credentials, proprietary data, or expensive jobs unless you trust the edge-router.gpupulse.dev service and understand any billing or data-retention terms.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used, the agent could submit a workload to external compute infrastructure, which may involve cost or unintended execution of user-provided prompts.

Why it was flagged

The skill documents an endpoint that can route and run workloads, not just recommend a backend. This is aligned with the stated compute-routing purpose, but it is still an action endpoint that users should invoke deliberately.

Skill content
### Execute (route + run)
```bash
curl -X POST "$BASE/execute" ... -d '{"task_type": "inference", "payload": {"model": "llama3.2:1b", "prompt": "hello"}}'
```
Recommendation

Use the route, backends, or health endpoints first when possible, and confirm the intended backend and payload before calling the execute endpoint.

What this means

Prompts, model inputs, or task payloads submitted to this API may leave the local environment and be processed by third-party infrastructure.

Why it was flagged

The documented workflow sends task requests to a remote routing service that may forward work to cloud GPU or quantum backends. This is disclosed and purpose-aligned, but privacy, retention, and backend data boundaries are not described.

Skill content
Base: `https://edge-router.gpupulse.dev/api/v1` ... Routes tasks to cheapest available backend: local (free) → cloud GPU ($0.01) → quantum ($0.10).
Recommendation

Avoid sending secrets or sensitive data through this router unless you trust the provider and have verified its data handling and cost terms.