Model Switch Notify
ReviewAudited by ClawScan on May 10, 2026.
Overview
The skill mostly matches its model-change notification purpose, but it stores persistent session/model data in a hard-coded home directory that does not match the documented user data path.
Review or patch the database path before installing. The skill does not show exfiltration or credential use, but it should store its SQLite database under your own OpenClaw data directory and clearly declare its Python runtime requirement.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your agent's model state, channel/session identifiers, and pending notification text could be saved in an unexpected local account path instead of your own OpenClaw data directory.
The skill's persistent SQLite store is hard-coded to a specific home directory rather than the documented per-user ~/.openclaw/data path; that store includes model state plus channel/session and pending notification fields.
DATA_DIR = Path("/home/wljmmx/.openclaw/data")
DB_PATH = DATA_DIR / "model-switch.db"Change the script to derive the data directory from the current user's home or OpenClaw configuration, document the exact path, and use restrictive file permissions for the database.
The skill may not work as expected if Python 3 is unavailable or if the helper path differs from the documented path.
The skill relies on a Python 3 helper command, while the registry requirements declare no required binaries and no install spec. This appears purpose-aligned, but the runtime dependency is under-declared.
python3 check_model.py check
Declare python3 as a required binary and keep the registry metadata, SKILL.md, and README version/runtime details consistent.