Smart LLM router — save 67% on inference costs. Routes every request to the cheapest capable model across 41 models from OpenAI, Anthropic, Google, DeepSeek,...
Security Analysis
medium confidenceThe skill's instructions are mostly coherent with a model-routing utility, but it omits key details about required credentials/config and relies on an external plugin install (not included), which raises transparency and privilege concerns.
Name/description match the instructions: it routes requests to many models and tells the agent to set models to blockrun/auto. However the description mentions routing 'all... through one wallet' while the skill declares no required env vars and only a single config path (models.providers.blockrun) — this is plausible if BlockRun is an aggregator, but the skill does not document what credentials or wallet config are required.
SKILL.md only instructs installing the external OpenClaw plugin and switching the agent's model to blockrun/auto or a pinned model. It does not ask the agent to read unrelated files, secrets, or system paths beyond the declared models.providers.blockrun config path.
This packaged skill is instruction-only and contains no code, but the provided workflow requires running 'openclaw plugins install @blockrun/clawrouter' which will download and install external code not present in this skill. The skill gives no install spec here, so installing will fetch code from outside the package (the homepage repo is given). That external install step could place arbitrary code on disk and should be audited before running.
The skill declares no required environment variables but does require the config path models.providers.blockrun. The description's 'one wallet' claim implies sensitive credentials/payment details will be used. The skill does not enumerate what secrets (wallet keys, provider API keys) are needed or how they are stored, which is a transparency gap and a proportionality concern.
always is false and there are no indications the skill requests persistent system-wide privileges or modifies other skills' configs. Autonomous invocation is allowed (default) but not combined here with other high-risk flags.
Guidance
This skill appears to be a router that relies on an external OpenClaw plugin (@blockrun/clawrouter). Before installing: (1) Inspect the external plugin's source (GitHub link) and release artifacts to see what code will be installed. (2) Check what configuration the 'models.providers.blockrun' entry contains — does it require a wallet key, API keys for many providers, or other secrets? If so, understand where those secrets are stored and who can access them. (3) Prefer installing in an isolated/test agent first to observe behavior and network activity. (4) Apply least-privilege: avoid supplying unrelated provider API keys or broad filesystem/agent permissions. (5) If you need stronger assurance, ask the maintainer for a clear list of required credentials and an audit or reproducible build of the plugin. These steps will reduce the risk of unintentionally exposing credentials or installing unreviewed code.
Latest Release
v0.10.5
Updated: 41 models (was 30+), 67% cost savings, Claude 4.6, Gemini 3.1 Pro, Flash Lite, o1
Popular Skills
Published by @1bcMax on ClawHub
