Back to skill
Skillv4.0.0

VirusTotal security

Model Router Hook · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 29, 2026, 4:58 AM
Hash
3007bb5f5e1f7f61741ceb25c4b5a49a77e1fb4cd62325952b3d1ad9ae0fbdf5
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: model-router-hook Version: 4.0.0 The skill bundle is classified as benign. Its primary function is to intelligently route AI models based on task complexity and manage costs, which aligns with its stated purpose in SKILL.md. While the `scripts/model_router.py` file uses `subprocess.run` to interact with the `openclaw` CLI for model switching, the arguments passed to these commands are hardcoded model identifiers ('kimi-coding/k2p5', 'kimi-coding/kimi-k2-thinking') and not user-controlled, mitigating shell injection risks. File operations are confined to the designated `~/.openclaw/workspace/memory/model-router/` directory for storing session and user memory, which is transparently documented and a legitimate use of local storage for a skill. No evidence of data exfiltration, persistence mechanisms, or prompt injection attempts against the agent was found.
External report
View on VirusTotal