Ai Config Admin
v1.1.0Manage AI configuration for OpenClaw, OpenCode, Codex CLI, and Claude Code. Use when the user wants to add/remove models or providers, switch default or agen...
⭐ 0· 142·1 current·1 all-time
by@mkuiwu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description promise (manage OpenClaw, OpenCode, Codex CLI, Claude Code configs) matches the included scripts and declared target file paths. The scripts operate on ~/.openclaw, ~/.config/opencode, ~/.codex, and ~/.claude files as expected.
Instruction Scope
SKILL.md confines runtime actions to building explicit script arguments, invoking the bundled scripts, and operating on the identified config files. It mandates backups and forbids manual edits or echoing secrets. The scripts implement summary/read/replace and targeted update operations described in the doc.
Install Mechanism
This is an instruction-only skill with bundled Python scripts and no install spec; nothing is downloaded or written to disk by an installer beyond the normal execution of included scripts.
Credentials
No environment variables are required to install or run the skill. The skill is explicitly designed to read and write auth/config files that may contain API keys or tokens (e.g., OPENAI_API_KEY, ANTHROPIC_AUTH_TOKEN). This is proportionate to its purpose, but users should be aware that invoking the skill with token-containing input will store those tokens into their local files (per user intent). The scripts intentionally summarize presence of keys as booleans and do not print secrets.
Persistence & Privilege
The skill is not always-enabled and does not request elevated OS privileges. It can be invoked autonomously (platform default), which is expected for skills; autonomy combined with the ability to modify local auth files increases impact if misused, but that is coherent with the skill's purpose.
Assessment
This skill edits and overwrites configuration and auth files in your home directory (backing them up first). That's exactly what it says it will do — including writing API keys/tokens if you provide them. Before installing or using: confirm you trust the skill owner, avoid pasting sensitive keys unless you intend them to be written to your local auth/config files, and request a dry-run or summary first (the scripts support summary operations) so you can review changes before a write.Like a lobster shell, security has layers — review code before you run it.
latestvk974nrc4th20w3r8sd2n9ye675837crv
License
MIT-0
Free to use, modify, and redistribute. No attribution required.