Model Alias Append
PassAudited by ClawScan on May 10, 2026.
Overview
The skill appears to do what it advertises—append a model alias to responses—but users should expect it to alter every response and monitor the local OpenClaw config while loaded.
This skill is reasonable for model-attribution transparency. Before installing, confirm you want every response modified with an alias, keep your OpenClaw config trusted, and be aware the bundled helper can edit the hook enabled flag in ~/.openclaw/openclaw.json.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Responses may be changed from their original content, which can matter for exact-output, JSON-only, or formatting-sensitive tasks.
The hook directly edits outgoing response content by appending the model alias. This matches the advertised purpose, but it affects every response handled by the hook.
response.content = `${processedResponse}\n\n**${modelAlias}**`;Install only if you want automatic response attribution, and disable it for workflows that require untouched output.
If the enable or disable methods are invoked, a local helper process runs and changes the OpenClaw hook setting.
The skill can execute a bundled local Node script to manage the hook. The command and arguments are fixed, so this is not evidence of arbitrary command execution.
const result = spawnSync('node', [`${__dirname}/scripts/manage-hook.js`, 'enable'], {Review the bundled helper before use and ensure the installed package path is trusted.
A tampered or untrusted OpenClaw config could cause unexpected alias text to be appended to responses.
The hook reads persistent local OpenClaw configuration and uses model alias values from it to affect future responses.
const configFile = fs.readFileSync(this.configPath, 'utf8'); const configData = JSON.parse(configFile);
Keep openclaw.json and any project-local .openclaw config files trusted, and avoid putting instruction-like text in model aliases.
The skill continues checking local configuration during the runtime session instead of acting only once.
The skill sets up periodic configuration checks every 30 seconds while loaded. This is disclosed as real-time monitoring and is scoped to local config change detection.
setInterval(() => {
this.checkAndReloadConfigIfNeeded();
}, 30000);Use it only if ongoing model-alias monitoring is desired; uninstall or disable the hook if continuous response modification is not wanted.