OpenClaw Smart Agent Hub

多模型提供商智能体分配系统 | Multi-Provider Agent Model Assignment System

This skill appears to do what it claims, but please review and follow these precautions before installing or running it: 1) Inspect config/models.yaml in the package and your workspace — do not leave real API keys in that YAML; prefer api_key_env and set keys in environment variables. 2) Add config/models.yaml (and any .env files) to .gitignore and avoid committing secrets. 3) Be aware the scripts will read and write files under the skill's config/ directory (they create a default config and a local_models_cache.json). 4) The auto-discovery feature issues HTTP requests to endpoints specified in local_discovery and provider base_url entries (commonly localhost). Only enable discovery or add endpoints you control. 5) Run the code in a least-privilege environment (container or restricted user) if you are unsure, and inspect any provider base_url entries for unexpected external hosts. 6) If you need further assurance, provide the author/source provenance (this package lists an AI author) or run the scripts in a sandbox to observe network activity and filesystem changes.

Type: OpenClaw Skill Name: oc-smart-agent-hub Version: 1.0.0 The skill bundle provides a legitimate utility for managing and routing LLM requests across various cloud providers and local model services (Ollama, LM Studio, vLLM). The Python scripts (provider_manager.py and model_router_v2.py) implement expected functionality such as local service discovery via HTTP GET requests to localhost and configuration management using yaml.safe_load. The bundle includes proactive security documentation (SECURITY_NOTICE.md) advising users on API key protection and environment variable usage, and no evidence of malicious intent, data exfiltration, or unauthorized execution was found.