Claw Switch

Security checks across static analysis, malware telemetry, and agentic risk

Overview

Claw Switch is a coherent instruction-only model router, but it can change OpenClaw's active model/provider and restart the gateway when used.

This appears benign and purpose-aligned for switching OpenClaw models. Before installing, make sure you are comfortable with an always-on router changing the active model/provider and restarting the gateway based on task type.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing it may let normal task requests change which provider/model handles future work and briefly interrupt OpenClaw while the gateway restarts.

Why it was flagged

The skill tells the agent to change the active OpenClaw model and restart the gateway based on explicit commands or task descriptions. This matches the stated router purpose, but it is still a local environment-changing action.

Skill content
用户说 `use <模型>` 或描述任务 ... 使用 `openclaw models set <model-id>` 切换模型 ... 运行 `openclaw gateway restart` 重启 gateway
Recommendation

Use it only if you want automatic model routing; check the active model with the status command and monitor provider costs or behavior after switches.

What this means

A user has less external provenance information and may not get install-time checks for the CLI commands the skill expects.

Why it was flagged

The artifact set is simple and contains no executable code, but provenance is limited and the registry metadata does not declare the OpenClaw CLI dependency that the skill instructions rely on.

Skill content
Source: unknown; Homepage: none ... Required binaries (all must exist): none ... No install spec — this is an instruction-only skill.
Recommendation

Prefer installing from a trusted ClawHub listing, and verify that the OpenClaw CLI and model IDs are available before relying on the skill.