Auto Invoke Router

AdvisoryAudited by Static analysis on May 4, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may enumerate installed skill metadata on the local machine.

Why it was flagged

The skill uses local shell discovery to locate installed skill files. This is central to its purpose and scoped to SKILL.md files, but users should run it only in the intended environment.

Skill content
find ~/.openclaw/skills "$OPENCLAW_SYSTEM_SKILLS" -name "SKILL.md" 2>/dev/null
Recommendation

Run it from the intended workspace and review the discovered skill list before relying on the generated routing.

What this means

Future conversations may invoke skills based on the generated routing, including any ambiguous or incorrect trigger mappings.

Why it was flagged

AGENTS.md is persistent agent context/configuration. Replacing its routing section can affect future skill selection, and manual edits in that section may be overwritten.

Skill content
The output is written into `AGENTS.md` as a `## Skill Routing` section... If a `## Skill Routing` section already exists, replace it in full
Recommendation

Inspect the generated Skill Routing section, keep custom rules outside the regenerated block, and use the standalone router.yml option if you want to review before changing AGENTS.md.