← Back to Skills Marketplace
doramirdor

NadirClaw

by Dor Amir · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
334
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install nadirclaw
Description
Install, configure, and run NadirClaw LLM router to cut AI API costs by 40-70%. Use when the user wants to reduce LLM spending, route prompts to cheaper mode...
Usage Guidance
Proceed with caution. The skill asks you to pip install an unverified package and then runs a background routing service that will receive and forward your prompts. Before installing: (1) verify the package source (PyPI project page, GitHub repo, maintainer), check release notes and recent activity; (2) inspect the package code or run the install in a disposable environment (container, VM) first; (3) back up your OpenClaw config and review what 'nadirclaw openclaw onboard' changes; (4) avoid routing sensitive data through it until you have audited the code or confirmed a trusted upstream release; (5) prefer installs with checksums/signatures or from a known homepage. If you share system API keys or point production traffic at the router, the potential impact is higher. Providing a homepage, repository link, or signed release would materially reduce the risk and could change this assessment.
Capability Analysis
Type: OpenClaw Skill Name: nadirclaw Version: 1.0.0 The skill bundle is classified as benign. All actions, including `pip install nadirclaw` and running `nadirclaw serve` in the background via `nohup` in `scripts/install.sh`, are directly aligned with the stated purpose of installing and configuring a local LLM router. There is no evidence of data exfiltration, malicious execution, unauthorized persistence (beyond a session-level background process), prompt injection attempts in `SKILL.md`, or obfuscation within the provided files.
Capability Assessment
Purpose & Capability
The name/description (LLM router, cost savings) aligns with the instructions: pip install a package, run its setup, and start a local server that OpenClaw and OpenAI-compatible tools can point at. However the package has no homepage or provenance in the metadata, so while the capabilities match the purpose, the lack of source/author information is notable.
Instruction Scope
SKILL.md and scripts/install.sh instruct installing a third-party Python package and running 'nadirclaw serve' as a background daemon (nohup). It also runs 'nadirclaw openclaw onboard', which modifies OpenClaw configuration. Those actions go beyond passive guidance: they install software, modify local config, and start a network-facing service that will receive and forward user prompts — all of which could expose or route sensitive data if the package behaves maliciously.
Install Mechanism
Install occurs via 'pip install nadirclaw' from an unspecified source (no homepage, no checksum). Installing an unverified PyPI package is a moderate-to-high risk: packages can contain arbitrary code executed at install or runtime. The included install script suppresses pip error output (2>/dev/null) and launches the service in the background — techniques that increase risk and reduce visibility.
Credentials
The skill declares no required environment variables or credentials, which is consistent with a local router. However SKILL.md references API keys and provider endpoints (OpenAI, Anthropic, Ollama) in troubleshooting/examples without declaring or explaining how credentials are used. This mismatch means the skill will rely on existing user-configured provider credentials (in OpenClaw or environment), which the skill will have access to indirectly after onboarding.
Persistence & Privilege
The skill does not request always:true and is user-invocable. The install script starts NadirClaw as a background process and writes logs to /tmp/nadirclaw.log; it also modifies OpenClaw config via onboarding. Starting a service and editing the agent config are within the claimed scope, but running a daemon that can receive/route prompts increases the operational footprint and blast radius if the package is malicious or buggy.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install nadirclaw
  3. After installation, invoke the skill by name or use /nadirclaw
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Slug nadirclaw
Version 1.0.0
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is NadirClaw?

Install, configure, and run NadirClaw LLM router to cut AI API costs by 40-70%. Use when the user wants to reduce LLM spending, route prompts to cheaper mode... It is an AI Agent Skill for Claude Code / OpenClaw, with 334 downloads so far.

How do I install NadirClaw?

Run "/install nadirclaw" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is NadirClaw free?

Yes, NadirClaw is completely free (open-source). You can download, install and use it at no cost.

Which platforms does NadirClaw support?

NadirClaw is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created NadirClaw?

It is built and maintained by Dor Amir (@doramirdor); the current version is v1.0.0.

💬 Comments