Neo Smart Router

• Analyzed: May 14, 2026, 4:46 AM
• Findings: 1
• Version: 1.3.0
• Hash: 30931c7fdea647cfca81c5b4f5b29e58f71ee38db4d9ee8a08381abc43580f6f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle 'neo-smart-router' is classified as benign. The `router.js` code performs local text processing, reads configuration from `sniff-rules.json` and `badge-config.json`, and writes logs to a local directory. It properly escapes keywords when building regular expressions, preventing regex injection. While `SKILL.md` and `DECISION_FLOW.md` contain examples of shell commands for user interaction or debugging (e.g., `/router-logs --today`, `node router.js "测试文本"`), these are presented as instructions for a human developer/user, not as direct commands for the AI agent to execute. The skill explicitly states security boundaries like 'does not upload to cloud (local processing)' and 'does not store user original text (only routing logs)'. There is no evidence of intentional harmful behavior, data exfiltration, unauthorized execution, or persistence mechanisms.