FastRouter Setup
v1.2.0Add the FastRouter AI provider to OpenClaw with all available text and vision models, fetched live from the FastRouter API. Use when: (1) a user wants to set...
⭐ 0· 60·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the actions in SKILL.md: fetching models from api.fastrouter.ai, filtering text/image-capable models, and adding them as a provider in ~/.openclaw/openclaw.json. All requested actions (read/write config, fetch remote model list, restart gateway) are coherent with a 'provider setup' skill.
Instruction Scope
Instructions are narrow and focused: parse an API key from the user message, call the FastRouter models endpoint, filter results, and write provider + model references to the OpenClaw config. This scope is appropriate, but the skill expects the agent to extract secrets from user messages (the API key) and to write that secret directly into the config file. Also, the SKILL.md explicitly states that restarting the gateway is the only step that requires user approval — writing/replacing provider config is not gated, which may be surprising to users.
Install Mechanism
Instruction-only skill with no install steps and no code files — lowest installation risk. It uses built-in web_fetch and read/write actions, not external installers or downloads.
Credentials
No environment variables or unrelated credentials are requested, which is appropriate. The skill does ask the user directly for an API key (prefix 'sk-v1-'), and then stores that key in openclaw.json. Two concerns: (1) the 'sk-v1-' prefix is identical to many OpenAI-style keys and could lead users to accidentally paste a different provider's key (unintentional credential exposure), and (2) the API key will be written to the user's config file in plaintext unless the platform masks or encrypts it — users should be aware of local storage risks.
Persistence & Privilege
The skill will modify the user's ~/.openclaw/openclaw.json and replace any existing 'fastrouter' provider entry with the fresh model list; this is within scope for a setup tool but can be destructive. While gateway restart is flagged as requiring user approval, the SKILL.md implies config changes occur without explicit consent beyond the initial invocation. Users should be prompted to review/backup config before the write step.
Assessment
This skill appears to do what it claims, but take these precautions before using it: 1) Only provide a FastRouter API key — double-check the key prefix so you don't accidentally paste an OpenAI or other provider key. 2) Backup ~/.openclaw/openclaw.json before running the skill; it will overwrite any existing 'fastrouter' provider entry. 3) Be aware the API key will be written into your config file (plaintext unless your system encrypts it); consider using a secrets store if available. 4) Confirm the gateway restart when prompted. If you want extra safety, ask the agent to show the exact provider object it plans to write and confirm it before saving.Like a lobster shell, security has layers — review code before you run it.
latestvk978s5rdqwhfjdqr6y76r4srad8450az
License
MIT-0
Free to use, modify, and redistribute. No attribution required.