Arc Free Worker Dispatch 1.1.0
v1.0.0Route tasks to free AI models via OpenRouter to save money. Use when the agent needs to delegate content writing, research, code generation, or other tasks t...
⭐ 0· 255·1 current·1 all-time
by@sieyer
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the actual behavior: the included Python script calls OpenRouter (openrouter.ai) and routes prompts to a small set of free models. Required binary (python3) and the single env var (OPENROUTER_API_KEY) are appropriate and expected.
Instruction Scope
SKILL.md simply instructs running the bundled script with task/model parameters. The script only reads the provided prompt, optional task file (tasks.json), and OPENROUTER_API_KEY; it does not attempt to harvest unrelated config files or environment variables. Caveats: batch mode will read whichever JSON file path the user supplies (no path restriction), and the code prints an error message suggesting 'credentials.txt' as an alternate location for the API key (that file is not used by the script). Output writes are validated to prevent overwriting common sensitive dotfiles, but reading arbitrary files is possible only if the user explicitly provides their path.
Install Mechanism
No installer or external downloads are used; this is an instruction-only skill with a bundled Python script. That minimizes install-time risk (nothing is fetched/installed from external URLs).
Credentials
Only OPENROUTER_API_KEY is required, which is proportionate to calling the OpenRouter API. No unrelated credentials, config paths, or excessive env variables are requested.
Persistence & Privilege
Skill is not always-enabled; it does not request persistent system privileges, does not modify other skills or global agent configuration, and uses standard, user-invoked behavior.
Assessment
This skill appears coherent and implements exactly what it claims: a Python script that sends prompts to OpenRouter using the OPENROUTER_API_KEY. Before installing/use: 1) Treat your OPENROUTER_API_KEY like any secret — the skill will send any prompt content (including file contents you pass) to openrouter.ai, so do not include passwords, private keys, or other secrets in prompts or task files. 2) The script prevents writing to common sensitive dotfiles, but batch mode will read any JSON file path you provide — avoid pointing it at sensitive system files. 3) The author/source is unknown and there's no homepage; if you need a higher assurance, review the included scripts yourself or run them in a restricted environment. 4) Note the script sets an HTTP referer header referencing arcself.com (cosmetic but observable by the remote API). If you accept those caveats, the requested permissions and behavior are proportionate to its purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk97fnn6rbkk9mxrey7jwn4m7rh825qmz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🏭 Clawdis
OSmacOS · Linux
Binspython3
EnvOPENROUTER_API_KEY