MikroTik API

Manages MikroTik routers via the RouterOS API (port 8728/8729). Use when the user wants to configure, monitor, or troubleshoot a MikroTik router — including...

This skill appears to do what it says (manage MikroTik RouterOS) and only needs the router host/user/password. Before installing or using it: (1) verify the routeros-api PyPI package and consider pinning a specific version or auditing its source; (2) avoid the insecure example defaults in the doc — prefer use_ssl=True with ssl_verify=True and avoid plaintext_login unless absolutely required by your router/version; (3) run installation in a controlled environment (virtualenv/container) rather than system Python, and do not use --break-system-packages unless you understand its effects; (4) use a least-privileged router account for API actions and rotate credentials after testing; and (5) be cautious because the skill metadata lacks a homepage or source repository — if possible, request provenance or source code before trusting it in production.

Type: OpenClaw Skill Name: mikrotik-api Version: 1.0.1 The skill provides extensive administrative control over MikroTik routers via the RouterOS API, including firewall manipulation, user management, and system reboots (SKILL.md). While these functions are aligned with the stated purpose, they constitute high-risk capabilities. Additionally, the documentation suggests insecure practices such as disabling SSL certificate verification (ssl_verify=False and curl -k), which are classified as vulnerabilities. No evidence of intentional malice or data exfiltration was identified.