ClawHub

Pura

v1.1.0

Cut your OpenClaw agent's LLM costs 40-60%. Automatic model selection routes simple tasks to cheap providers, complex tasks to premium ones. Free for 5,000 r...

⭐ 0· 109·0 current·0 all-time
byErik@espetey
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description claim a routing/gateway that selects cheaper models; the skill only requires a single PURA_API_KEY and (optionally) PURA_GATEWAY_URL, which matches the claimed functionality. The included scripts and SDK examples all call the Pura gateway, which is coherent with the described purpose.
ℹ
Instruction Scope
SKILL.md instructs the agent to send all LLM requests (prompts, messages) to https://api.pura.xyz (or the optional PURA_GATEWAY_URL). This stays within the skill's stated purpose but has an important privacy/security implication: sensitive prompts and context will be transmitted to and processed by the external service (and the skill's verify/report scripts perform real requests). The instructions do not access unrelated local files or other credentials.
✓
Install Mechanism
No install spec; the skill is instruction-plus-scripts only. The bundled shell scripts are plain and readable, call the gateway endpoints, and do not download/execute external code. No archive downloads or 3rd-party installs are present.
✓
Credentials
Only one primary environment variable (PURA_API_KEY) is required and optional PURA_GATEWAY_URL is declared in metadata; the scripts use only those. The requested env access is proportionate to a gateway/proxy service that needs an API key.
✓
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide settings, and contains only small helper scripts that read/send via network. It does not request elevated or persistent system privileges.
Assessment
This skill is internally consistent: it changes your agent's base URL so all LLM requests go through Pura. That is the expected behavior, but it means Pura will receive full prompts, context, and any sensitive data in requests — and the PURA_API_KEY grants the gateway permission to act on your behalf and bill usage. Before installing, confirm you trust https://api.pura.xyz (review their privacy policy, logging/retention, and security practices), restrict use to non-sensitive workloads if you have concerns, rotate and monitor the API key, and consider using a self-hosted gateway if you cannot accept sending prompts to a third party. The included scripts are readable and only call the gateway; there is no hidden or obfuscated code in the bundle.

Like a lobster shell, security has layers — review code before you run it.

latestvk976mfdzzf8dbzfhwqy7ygrh4583rfc0

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

⚡ Clawdis
EnvPURA_API_KEY
Primary envPURA_API_KEY

Comments