ClawHub

Router9

v1.0.2

All-in-one AI skills via Router9 API — speech recognition, text-to-speech, image description, OCR, image generation, and file storage. Use when the user asks...

⭐ 0· 27·0 current·0 all-time
by@shushuo-dev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (ASR, TTS, OCR, image generation, storage) matches the included CLI script and SKILL.md. Requested binary (python3) and the single env var (ROUTER9_API_KEY) are appropriate for a script that calls a remote Router9 API.
✓
Instruction Scope
Runtime instructions are limited to running the included Python CLI which reads only files explicitly passed by the user and the ROUTER9_API_KEY env var. The script sends file contents and prompts to api.router9.com and uses presigned S3 URLs for uploads/downloads — this is expected behavior for the stated functionality.
✓
Install Mechanism
No install specification; the skill is instruction-only with an included Python script. No downloads from third-party URLs or archive/extract steps are present. This is low-risk from an install perspective.
✓
Credentials
Only ROUTER9_API_KEY is required and is the primary credential for the Router9 API. No unrelated credentials, config paths, or broad secrets are requested.
✓
Persistence & Privilege
always is false and the skill does not request system-wide privileges or modify other skills. The skill can be invoked autonomously by the agent by default (normal behavior) but does not request forced inclusion or elevated persistence.
Assessment
This skill appears internally consistent and implements the Router9 API calls described in SKILL.md. Important considerations before installing: (1) Using the skill will send any files, audio, or images you supply to Router9 and to presigned S3 endpoints; ensure you trust router9.com for the sensitivity of that data. (2) The single secret required is ROUTER9_API_KEY — treat it like any API key (store it securely, consider a key with limited scope/quota, and rotate/revoke if compromised). (3) The agent can invoke the skill autonomously; if you are concerned about automatic network activity, restrict agent autonomy or only enable the skill when needed. (4) Test with non-sensitive files first and verify billing/quota behavior in your Router9 dashboard. If you need further assurance, verify the Router9 domain, review their privacy/billing docs, or request a smaller-scope API key from the provider.

Like a lobster shell, security has layers — review code before you run it.

latestvk976h55tmxgrawrsjch1qh5d6d84xjde

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binspython3
EnvROUTER9_API_KEY
Primary envROUTER9_API_KEY

Comments