solar-delegation

Delegate longer user-facing text generation to Upstage Solar Pro3 while keeping the primary model for planning and tool calls. Use when drafting explanations...

This skill appears to do what it says (delegate long-form generation to Upstage Solar via OpenRouter) but the package metadata fails to declare the API keys and config changes it needs. Before installing: (1) confirm you or an admin are willing to add an OpenRouter provider and store its API key in your gateway config (and understand where/how keys are stored), (2) verify the OpenRouter domain (https://openrouter.ai) is the intended endpoint, (3) ensure the skill will not be given broader credentials than needed (don’t reuse admin secrets unnecessarily), (4) ask the skill author/registry maintainer to update metadata to declare required env vars/credentials and document exactly what gateway config changes are required, and (5) consider limiting delegation to specific sessions or setting a conservative default threshold until you’ve tested behavior. If you cannot verify those points, treat the metadata omission as a red flag and do not enable this skill in production systems.

Type: OpenClaw Skill Name: solar-delegation Version: 1.0.0 The skill bundle is benign. It describes a legitimate delegation mechanism for AI agents to offload long text generation to a specialized model (Upstage Solar Pro3 via OpenRouter). The `SKILL.md` instructions for the agent are clear, focused on its stated purpose, and notably include a critical safeguard: `중요: 도구(tool)를 사용하지 말고 텍스트만 바로 출력해줘. 파일 읽기/쓰기 등 도구 호출 금지.` (Important: Do not use tools, just output text directly. Prohibit tool calls like file read/write.), which actively mitigates prompt injection risks against the delegated model. The `references/setup-guide.md` provides standard configuration steps for OpenClaw. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation.