OpenClaw Session Model Switcher

• Analyzed: May 11, 2026, 6:40 AM
• Findings: 0
• Version: 0.1.3
• Hash: 7b6213350bc3c41ef94ec82c6ffdab4417c5bc989c646f08cdc81e84ef59d9a0
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: openclaw-session-model-switcher Version: 0.1.3 The skill is designed to manage AI model switching within an OpenClaw session by interacting with system scripts (switch-model.sh, list-models.sh, model-status.sh). While handler.sh performs a chmod +x on scripts outside its own directory, this appears to be a functional requirement for the environment rather than a malicious act. The logic for parsing user input and handling model aliases in model-aliases.json is consistent with the stated purpose, and no evidence of data exfiltration or unauthorized execution was found.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI02: Tool Misuse and Exploitation

Note

What this means

When invoked, the agent may switch the current session to a different model or provider.

Why it was flagged

This gives the skill authority to change the active model for the current session. That behavior is the stated purpose and is bounded to the current session, but users should understand it changes the agent's runtime behavior.

Skill content

directly execute `/model <provider/model>` in the current session after resolving a unique target

Recommendation

Use the skill only when you intend to change the current session model, and review ambiguous choices before selecting one.

ASI04: Agentic Supply Chain Vulnerabilities

Note

What this means

The actual model resolution behavior may depend on local helper scripts outside the reviewed package.

Why it was flagged

The handler makes and runs helper scripts from a workspace scripts directory, but those helper scripts are not included in the provided file manifest and are not declared as required paths. This creates a provenance/packaging item users should verify.

Skill content

SWITCH_SCRIPT="$WORKSPACE_DIR/scripts/switch-model.sh" ... chmod +x "$SWITCH_SCRIPT" "$STATUS_SCRIPT" "$LIST_SCRIPT" ... RESOLUTION="$($SWITCH_SCRIPT "$SELECTION")"

Recommendation

Before installing or using it, verify that scripts/switch-model.sh, scripts/list-models.sh, and scripts/model-status.sh are trusted and only perform the documented model-listing/status/switch-resolution tasks.