Back to skill
Skillv4.0.0
VirusTotal security
Model Router Hook · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 29, 2026, 4:58 AM
- Hash
- 3007bb5f5e1f7f61741ceb25c4b5a49a77e1fb4cd62325952b3d1ad9ae0fbdf5
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: model-router-hook Version: 4.0.0 The skill bundle is classified as benign. Its primary function is to intelligently route AI models based on task complexity and manage costs, which aligns with its stated purpose in SKILL.md. While the `scripts/model_router.py` file uses `subprocess.run` to interact with the `openclaw` CLI for model switching, the arguments passed to these commands are hardcoded model identifiers ('kimi-coding/k2p5', 'kimi-coding/kimi-k2-thinking') and not user-controlled, mitigating shell injection risks. File operations are confined to the designated `~/.openclaw/workspace/memory/model-router/` directory for storing session and user memory, which is transparently documented and a legitimate use of local storage for a skill. No evidence of data exfiltration, persistence mechanisms, or prompt injection attempts against the agent was found.
- External report
- View on VirusTotal
