Code Pluginsource linked
Abliteration.ai Providerv0.1.0
Abliteration.ai provider plugin for OpenClaw
Community code plugin. Review compatibility and verification before install.openclaw plugins install clawhub:@abliterationai/openclaw-abliteration-providerLatest release: v0.1.0Download zip
Capabilities
- configSchema
- Yes
- Executes code
- Yes
- HTTP routes
- 0
- Providers
- abliteration
- Runtime ID
- abliteration
Compatibility
- Built With Open Claw Version
- 2026.4.24
- Min Gateway Version
- 2026.4.24
- Plugin Api Range
- >=2026.4.24
- Plugin Sdk Version
- 2026.4.24
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The code, README, and SKILL.md consistently implement an OpenClaw provider for Abliteration.ai (base URL https://api.abliteration.ai/v1, model abliteration/abliterated-model). That functionality aligns with the name and description. However the top-level registry metadata in the skill summary lists no required env vars/primary credential, while the plugin files and onboarding explicitly expect an ABLITERATION_API_KEY. This mismatch is a proportionality/accuracy issue.
Instruction Scope
Runtime instructions are narrowly scoped: install/enable the plugin, run the OpenClaw onboarding flow, and provide the Abliteration API key. The SKILL.md and onboard commands reference only the provider's API key and base URL; there are no instructions to read unrelated files, secrets, or to exfiltrate data to other endpoints.
Install Mechanism
There is no custom install spec in the registry (instruction-only), and the SKILL.md uses normal openclaw/npm install flows. The package includes source files (TypeScript) but no download-from-arbitrary-URL installs or extract steps. Package-lock is large (dev deps), but that's expected for a TypeScript project and tests — not an in-repo arbitrary installer.
Credentials
The plugin legitimately requires a single API key (ABLITERATION_API_KEY) to call the provider. However the provided skill metadata claimed 'Required env vars: none' and 'Primary credential: none' while openclaw.plugin.json, SKILL.md, onboarding code, and tests all reference ABLITERATION_API_KEY. That discrepancy is potentially misleading and could cause users to miss that a secret is needed. No other unrelated secrets or credentials are requested in the code.
Persistence & Privilege
The skill does not request 'always: true' and uses normal OpenClaw plugin entry points. It does not modify other skills' configs beyond registering provider metadata and applying provider config into the OpenClaw config (expected onboarding behavior). Autonomous invocation is enabled by default (platform default) but not combined here with other red flags.
What to consider before installing
This plugin appears to be a straightforward OpenClaw provider for Abliteration.ai and only needs an Abliteration API key (ABLITERATION_API_KEY). Before installing: (1) confirm the skill metadata is corrected to list ABLITERATION_API_KEY as a required credential (the code and README expect it); (2) verify the package source (GitHub repo and ClawHub/npm package) to ensure you trust the publisher; (3) limit the API key's scope/permissions if possible and store it in a secure place (do not paste into public logs); (4) review openclaw.plugin.json and the onboard.ts code if you want to confirm exactly how the key is used. The mismatch between registry metadata and the plugin's instructions is the main reason I flagged this as suspicious rather than benign — there is no other evidence of unexpected behavior in the repository.Verification
- Tier
- source linked
- Scope
- artifact only
- Summary
- Validated package structure and linked the release to source metadata.
- Commit
- 4b07d3168a43
- Tag
- v0.1.0
- Provenance
- No
- Scan status
- pending
Tags
- latest
- 0.1.0
Abliteration Provider for OpenClaw
Third-party Abliteration.ai model provider plugin for OpenClaw.
Install
After the package is published to ClawHub or npm:
openclaw plugins install @abliterationai/openclaw-abliteration-provider
openclaw plugins enable abliteration
openclaw gateway restart
For local development from this repository:
npm install
openclaw plugins install .
openclaw plugins enable abliteration
openclaw gateway restart
Configure
Run onboarding with an API key:
openclaw onboard --auth-choice abliteration-api-key
For non-interactive setup:
openclaw onboard --non-interactive \
--mode local \
--auth-choice abliteration-api-key \
--abliteration-api-key "$ABLITERATION_API_KEY" \
--skip-health \
--accept-risk
The plugin registers:
- Provider id:
abliteration - API key env var:
ABLITERATION_API_KEY - Default model:
abliteration/abliterated-model - API: OpenAI Responses
- Base URL:
https://api.abliteration.ai/v1
Development
npm test
npm run typecheck
npm run pack:dry-run
Publish on ClawHub after GitHub is pushed:
clawhub package publish abliterationai/openclaw-abliteration-provider