Add NewCLI Provider (Claude/GPT/Gemini)

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent instruction-only guide for adding a third-party model provider to OpenClaw, but users should understand it will route model traffic through NewCLI and require a NewCLI API key.

Install/use this skill only if you intend to route OpenClaw model traffic through NewCLI. Before applying the configuration, verify the provider endpoints, protect the API key, back up ~/.openclaw/openclaw.json, and confirm that sending your prompts through this proxy is acceptable for your privacy and compliance needs.

Findings (5)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A mistaken configuration could route model requests to the wrong provider or break model selection.

Why it was flagged

The skill asks the agent/user to modify OpenClaw provider configuration. This is expected for adding a model provider, but it affects how the agent will call models in the future.

Skill content
在 `~/.openclaw/openclaw.json` 的 `models.providers` 下添加三个 provider。
Recommendation

Review the exact JSON changes, keep a backup of the existing OpenClaw config, and test each provider before relying on it.

What this means

Anyone who obtains the key could use the user's NewCLI account or consume its quota.

Why it was flagged

The skill requires a NewCLI API key shared across multiple provider configurations. This credential use is purpose-aligned, but it grants access to the user's NewCLI account quota.

Skill content
API Key | 格式为 `sk-ant-oat01-...` 的密钥(三个 provider 共用同一个)
Recommendation

Use a dedicated, revocable API key, avoid pasting it into public logs or chats, and monitor account usage after setup.

What this means

Sensitive prompts, code, documents, or outputs sent to the model may be visible to or processed by the NewCLI proxy and downstream providers.

Why it was flagged

The configured provider is a third-party proxy between OpenClaw and downstream model services. Future prompts and responses may pass through this provider, which is expected but privacy-relevant.

Skill content
NewCLI (FoxCode) is a multi-model proxy service that provides unified access to Anthropic Claude, OpenAI GPT, and Google Gemini through a single account and API key.
Recommendation

Confirm NewCLI's privacy, logging, and retention terms before sending sensitive or regulated data through this provider.

NoteMedium Confidence
ASI08: Cascading Failures
What this means

If the preferred route fails or behaves unexpectedly, multiple future agent requests may be affected until the fallback configuration is changed.

Why it was flagged

The skill recommends a provider preference/fallback strategy. This is aligned with the setup goal, but provider outages, unsupported models, or misrouting could affect many future OpenClaw tasks.

Skill content
策略:所有重要任务优先使用 `newcli-aws`,主线路 `newcli` 作为备用。
Recommendation

Keep fallback chains minimal, verify each model is available on the account, and document how to revert to the previous provider setup.

What this means

Users could rely on a route that the provider says should not be redistributed, potentially risking account restrictions or refund loss.

Why it was flagged

The artifact includes a provider warning about distributing the AWS route and also includes a referral link. This is disclosed, but users should recognize the commercial incentive and account-risk tradeoff.

Skill content
服务商声明:严禁分发 AWS 线路地址,发现封禁不退款。... 如果觉得这个 Skill 有用,请用我的邀请码注册: https://foxcode.rjj.cc/auth/register?aff=7WTAV8R
Recommendation

Verify NewCLI's current terms directly and do not treat the referral or pricing claims as an endorsement by OpenClaw.