Provider Sync

• Analyzed: May 11, 2026, 5:37 AM
• Findings: 1
• Version: 2.1.5
• Hash: 0873a8775d11b106912cb545a743297c57f964669fa0f42b930b28e7d1390fb4
• Source: palm
• External report: View on VirusTotal

Findings (1)

The provider-sync skill bundle is a utility designed to synchronize AI model lists from upstream providers into the OpenClaw configuration. The core script, scripts/provider_sync.py, demonstrates security-conscious design by implementing a 'dry-run' preview mode, creating automatic backups of configuration files, and enforcing restrictive file permissions (chmod 600). Notably, it includes a redaction function to ensure sensitive fields like API keys and authorization tokens are stripped before being stored in local cache files. The SKILL.md instructions and documentation in the references/ directory align with the stated purpose and emphasize safety boundaries, such as restricting write access in group chat environments.