Rei-Clawd

Set up Rei Qwen3 Coder as a model provider. Use when configuring coder.reilabs.org, adding Rei to Clawdbot, or troubleshooting 403 errors from Rei endpoints.

This skill appears to do what it claims: add Rei as a model provider by editing ~/.clawdbot/clawdbot.json and restarting the gateway. Before installing or letting an agent run the setup script: (1) Verify you trust coder.reilabs.org and are willing to store your Rei API key in plaintext in ~/.clawdbot/clawdbot.json. (2) Inspect the scripts yourself (they are short) and keep the created .bak backup if you want to revert. (3) Be cautious about automatic agent invocation: running the setup script will immediately modify your Clawdbot config and restart the gateway. (4) Note a robustness/security issue: setup.sh injects the API key directly into a JSON here-doc and then passes it to jq with --argjson; if your API key contains quotes/newlines or maliciously crafted content it could corrupt the JSON. To be safer, run the script interactively or manually edit the config using a JSON-safe method (e.g., use jq --arg to set string fields) if you have concerns.

Type: OpenClaw Skill Name: rei Version: 1.0.3 This skill bundle is benign. It configures the local Clawdbot application to use a new model provider (Rei Qwen3 Coder) by modifying its configuration file (`~/.clawdbot/clawdbot.json`). The `setup.sh` script uses `jq` to safely update the JSON configuration, backs up the original file, and restarts the Clawdbot gateway. The `revert.sh` and `switch.sh` scripts perform related administrative tasks. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent beyond its stated purpose of configuring the model provider at `https://coder.reilabs.org/v1`.