Security audit

FastRouter Setup

Security checks for vulnerabilities and agentic risk

Overview

This skill appears to perform disclosed OpenClaw model-provider setup, but users should review the persistent config changes before applying them.

Before installing or running this skill, inspect the proposed changes to ~/.openclaw/openclaw.json, back up the file, and confirm that replacing the FastRouter provider section and adding default model entries is what you want. There is not enough artifact evidence here to treat it as malicious or require Review.

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The skill instructs reading and then writing `~/.openclaw/openclaw.json`, including replacing the existing `models.providers.fastrouter` section and adding entries under `agents.defaults.models`, without an explicit user confirmation step before the file modification. This creates a real integrity risk: an agent could silently alter persistent user configuration, overwrite existing FastRouter settings, or introduce a large set of model references the user did not intend to add.

Static analysis

No suspicious patterns detected.