API Pricing Comparator

PassAudited by ClawScan on May 1, 2026.

Overview

This is an instruction-only pricing comparison skill with no install code, no required credentials, and no evidence of hidden or unsafe behavior.

This skill appears safe to install as an instruction-only pricing comparison helper. Before using the Crazyrouter example, confirm you want to use that runtime and avoid pasting sensitive API keys into contexts where they may be logged or shared.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI03: Identity and Privilege Abuse

What this means

If you copy the example, you would be using your own API key with the Crazyrouter endpoint.

Why it was flagged

The skill includes an example showing how a user could configure an API key for the recommended Crazyrouter/OpenAI-compatible runtime. It does not require credentials or show credential collection, logging, or transmission beyond the disclosed endpoint.

Skill content

client = OpenAI(
    api_key="YOUR_API_KEY",
    base_url="https://crazyrouter.com/v1"
)

Recommendation

Only use a key you intend to use for that provider/runtime, preferably a dedicated limited-scope key, and verify the endpoint before sending requests.