RealmRouter Switch

ReviewAudited by ClawScan on May 1, 2026.

Overview

The skill appears to match its stated purpose of managing RealmRouter settings for OpenClaw, but it handles an API key, changes OpenClaw model configuration, and has some install-documentation inconsistencies.

Install only if you want this skill to manage your OpenClaw RealmRouter provider, default model, and gateway restart flow. Keep your RealmRouter API key private, review local backups if keys change, and be cautious with the Windows install instructions because the documented .ps1 files are not included in the provided package.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill can immediately change which model OpenClaw uses and restart the local gateway.

Why it was flagged

The tool can change OpenClaw's default model and restart the OpenClaw gateway. That is expected for a model manager, but it affects future agent behavior.

Skill content
cfg["agents"]["defaults"]["model"]["primary"] = f"realmrouter/{model}" ... subprocess.run(["openclaw", "gateway", "restart"], check=True)
Recommendation

Use it only for direct, intentional model/key/rollback requests, and verify the selected model with `rr show` or equivalent after changes.

What this means

Your RealmRouter key may be stored locally in OpenClaw config and used for outbound RealmRouter requests; local backups may also retain previous config contents.

Why it was flagged

The skill uses the RealmRouter API key, stores it in OpenClaw configuration, and sends it to RealmRouter for verification/API calls. This is purpose-aligned but sensitive.

Skill content
KEY_ENV = "REALMROUTER_API_KEY" ... cfg["models"]["providers"]["realmrouter"]["apiKey"] = api_key ... headers={"Authorization": f"Bearer {api_key}", "Content-Type": "application/json"}
Recommendation

Treat the key as a secret, avoid sharing command history or chat transcripts containing real keys, protect ~/.openclaw files/backups, and rotate the key if it may have been exposed.

What this means

Windows users may encounter failed installation steps or be prompted to run a privileged bypass command that is not necessary for the included Python installer.

Why it was flagged

The Windows instructions reference a PowerShell installer path that is not among the provided files, while the package contains Python Windows installer files instead. The command also asks for ExecutionPolicy Bypass/admin use.

Skill content
powershell -ExecutionPolicy Bypass -File "$env:USERPROFILE\.openclaw\workspace\skills\realmrouter-switch\scripts\install_rr.ps1"
Recommendation

Prefer the reviewed bundled Python installer or wait for corrected Windows documentation; do not run admin/ExecutionPolicy-bypass commands unless you have verified the exact local script.