Openclaw Model Router

• Risk level: Low
• Analyzed: Feb 18, 2026, 7:04 PM
• Findings: 0
• Version: 2.2.0

Overview

The skill's requested actions (reading gateway config, web-searching public model cards, writing a local model-registry.json, and optionally patching routing with user approval) align with its stated purpose and there are no obvious mismatches in requested credentials or install behavior.

This skill appears coherent with its stated purpose, but before installing: (1) confirm what gateway config.get returns in your environment — ensure it does not include API keys or secret tokens that the skill might read; (2) be aware the skill will perform outbound web searches for public model cards and pricing (this may leak model names/provider names to your chosen search engine); (3) review any model-registry.json the skill writes to your workspace (it will contain benchmark/pricing metadata) and consider backing up your OpenClaw config before allowing any automated gateway config.patch changes; (4) only approve routing changes you understand — the skill promises to ask first. If you want higher assurance, ask the skill author to document the exact gateway fields it reads and to show a minimal example of gateway config.get output it expects.