Ping Model

Measure and display AI model response latency. Use when the user types /ping or /ping followed by a model name to test round-trip time. Captures precise timi...

This skill is not outright malicious, but it's inconsistent and somewhat misleading. Before installing or using it: 1) Note that the JS script runs a shell command 'openclaw status' — ensure you have (and trust) an 'openclaw' binary on your system because the script executes it via child_process.execSync. 2) Understand the script only simulates latency using timeouts; it does not actually switch models or call model APIs to measure real model processing time despite SKILL.md claiming cross-model testing. If you need real measurements, review and modify the script to use your platform's official model-switching and timing APIs and verify it restores context safely. 3) Because the script executes shell commands, run it in a trusted or isolated environment if you do not fully trust the skill source. 4) If you expect true cross-model testing, ask the author to: declare 'openclaw' as a required binary, implement explicit model-switching and restore behavior, or document clearly that this is a demo/simulation.

Type: OpenClaw Skill Name: ping-model Version: 1.0.0 The skill bundle is designed to measure and display AI model response latency, currently using a simulation. The `SKILL.md` instructions are clear and focused on output formatting, showing no signs of prompt injection attempts to subvert the agent. The `ping-model.js` script uses `child_process.execSync` to run `openclaw status`, which is a legitimate, hardcoded interaction with the local platform CLI and does not incorporate unsanitized user input. User-provided arguments for model names are only used in the internal simulation logic and for display, not in any shell commands. There is no evidence of malicious intent such as data exfiltration, persistence, or unauthorized network activity.