Default Model
v1.0.0Set the default model persistently via /default_model command with Telegram interactive picker
⭐ 0· 74·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description, SKILL.md, and index.ts show a single, coherent purpose: read available model providers from the runtime config and persist a chosen model to agents.defaults.model.primary. The plugin reads and writes the OpenClaw config, which is exactly what this feature requires. No unrelated binaries or credentials are requested.
Instruction Scope
Runtime instructions and code only read config, build provider/model lists, present interactive Telegram UI, authorize the sender, and write the updated config. The code uses requireAuth and checks ctx.auth.isAuthorizedSender for interactive changes, which constrains who can change the global default. All referenced files/paths are within the OpenClaw config domain and match the documented behavior.
Install Mechanism
There is no download/install script or external installer. package.json points to the bundled extension (index.ts). No URLs, extract steps, or third‑party packages are being pulled at install time in the provided manifests.
Credentials
The skill declares no required environment variables, credentials, or config paths beyond accessing the OpenClaw runtime config (which is necessary to implement its functionality). No sensitive credentials are requested or referenced.
Persistence & Privilege
The plugin intentionally writes to the global OpenClaw config to persist the default model; this matches its purpose. It does not set always:true. Because it modifies a global config value, installing it grants the plugin the ability to change default behavior for new sessions — that is expected but should be considered before installation.
Assessment
This plugin appears to do exactly what it says: present a model picker and persist the chosen model to the OpenClaw config. Before installing: (1) verify the full source — the index.ts in the prompt was truncated, so review the complete file in the referenced repository to confirm there are no hidden network calls or unexpected behavior; (2) confirm you trust the plugin author/repository (the URL in SKILL.md should be inspected); (3) remember the plugin will change a global default (agents.defaults.model.primary), so restrict who can invoke it (it uses requireAuth and checks authorization, but confirm your gateway's auth rules); (4) test in a non-production environment first. If you want extra assurance, ask for the untruncated full source or run a code review focused on any remaining lines not shown.Like a lobster shell, security has layers — review code before you run it.
latestvk97awjvtcc69rjsymrd17sq8c583z06j
License
MIT-0
Free to use, modify, and redistribute. No attribution required.