Openclaw Smart Router

Automatically routes AI requests to cost-optimal models based on task complexity and budget, saving 30-50% on model expenses with adaptive learning.

What to check before installing: - Understand privacy: this skill intercepts every request (prompts, context, usage) and stores analysis/metrics locally. If you send sensitive prompts, review what the code stores and logs. - Review payment behavior: the skill advertises x402 agent payments and states agents can pay for Pro without human approval. Inspect src/x402.js (and any payment-handling code) to see how transactions are initiated and authorized. Confirm whether payments require user-held private keys, platform wallet signing, or external services. If unclear, disable or restrict payment features until you verify the flow. - Confirm dashboard/server exposure: the code depends on express and runs a dashboard (docs cite http://localhost:9093). Ensure it binds only to localhost or is otherwise firewalled if you don't want external access. - Review storage location and retention: the skill will create ~/.openclaw/openclaw-smart-router and a SQLite DB. Decide whether that is acceptable and audit what fields (token counts, selection reasons, any text excerpts) are persisted. - Test in a sandbox: run the skill in an isolated environment to see runtime network calls and what the skill logs/creates. Monitor outbound connections during 'subscribe' or x402 flows. - Consider limiting autonomy: if your platform allows it, disable autonomous agent payments or require explicit human approval for subscriptions. Also limit which agents are permitted to use this skill until you have confidence in payment authorization and data handling. Given the explicit autonomous payment capability and persistent hooks over all requests, exercise caution: the skill appears coherent with its stated routing purpose but the payment/financial automation and persistent data collection are notable risk vectors that should be reviewed and constrained if you proceed.

Type: OpenClaw Skill Name: openclaw-smart-router Version: 1.0.0 The OpenClaw Smart Router skill is generally well-structured and uses prepared statements for database interactions, mitigating common SQL injection risks. However, it contains a critical vulnerability in its x402 payment verification mechanism within `src/x402.js`. The `verifyTransactionOnChain` function, intended for on-chain transaction validation, is currently a placeholder that accepts any `tx_hash` string longer than 32 characters as valid. This allows an attacker to bypass payment and gain unauthorized access to the 'Pro tier' features (unlimited routing decisions, advanced learning) by providing a fake transaction hash. This is a significant flaw that undermines the skill's business model and grants unearned privileges, classifying it as suspicious.