A.I. Smart Router

This skill appears mostly consistent with a multi-provider model router, but there are several red flags you should address before installing: 1) The metadata claims only ANTHROPIC_API_KEY is required, but the code expects additional optional provider keys and uses router/log state env vars that aren't declared — don't export credentials you don't intend to use. 2) The SKILL.md contains prompt-injection patterns (e.g., 'ignore-previous-instructions', 'system-prompt-override'); review the SKILL.md and all code for any instructions that attempt to change the agent's system prompt or execute unbounded commands. 3) The HITL gate references Telegram notifications but no TELEGRAM_TOKEN is declared — find where notifications are sent and verify you control that endpoint. 4) Because the skill can read/write ~/.openclaw state and invoke sessions_spawn (spawning sub-agents), run it in an isolated environment or sandbox (or inspect and strip the code) if you decide to try it. 5) If you trust the author and want to proceed, at minimum: (a) audit the code for external network calls/endpoints, (b) remove or neutralize any prompt-override directives, (c) only set provider keys you intend to allow, and (d) run it with least privilege and logging enabled so you can observe behavior. If you want, provide the omitted files or the rest of SKILL.md and I can re-scan for external endpoints, Telegram logic, or other undisclosed behaviors.