← 返回 Skills 市场
123
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install toolrouter-gateway
功能描述
Unified access to 150+ tools via ToolRouter API. Dynamically exposes research, security scanning, video production, web extraction, and more as native OpenCl...
安全使用建议
This skill is suspicious because the docs promise a production-grade proxy and automatic provisioning but the packaged code is a local demo stub and the manifest omits the API key requirement. Before installing or giving it any keys: (1) Do not set TOOLROUTER_API_KEY globally until you verify the source. (2) Ask the publisher for a public homepage or repository and a clear changelog showing real network/MCP implementation. (3) Confirm why the registry metadata does not declare the required TOOLROUTER_API_KEY. (4) If you test it, run it in an isolated workspace/container because it will create memory/ files that store inputs and usage logs. (5) Review or run the code yourself to verify whether it actually calls https://api.toolrouter.com and whether it would ever transmit cached inputs. If the developer provides a real network implementation, a declared env var in the manifest, and provenance (repo/homepage/license), this assessment could be revisited.
功能分析
Type: OpenClaw Skill
Name: toolrouter-gateway
Version: 1.0.0
The toolrouter-gateway skill is a legitimate-appearing proxy for an external tool aggregation service. The code in scripts/run.py implements basic discovery, status reporting, and a simulated proxy with local caching and usage logging in the memory/ directory. No evidence of data exfiltration, malicious execution, or prompt injection was found; the implementation is consistent with the stated purpose of providing a unified interface to the ToolRouter API (api.toolrouter.com).
能力评估
Purpose & Capability
SKILL.md claims a gateway/proxy to ToolRouter (150+ dynamic tools, MCP server, automatic provisioning) and requires a TOOLROUTER_API_KEY, but the registry metadata declares no required env/credential. The included code is a demo stub that returns a 3-item mock catalog and does not actually perform network calls to api.toolrouter.com. This is inconsistent: the skill advertises production proxy behavior but the code does not implement it, and the manifest omits the API key requirement.
Instruction Scope
The runtime instructions ask for an API key, describe dynamic creation of many native tools, MCP server usage, and calling api.toolrouter.com; the actual run.py only implements local discovery/status/proxy stubs for a few tools and never performs HTTP/MCP network calls. The script writes cache and usage lines to memory/<files> and stores input objects in the cache file, which can persist potentially sensitive inputs. The discrepancy between broad, networked behavior in docs and local stub behavior in code is a scope mismatch.
Install Mechanism
There is no install spec (instruction-only install) which is lower risk. However a code file is included (scripts/run.py) that will execute if the agent runs it; the code writes files into the workspace (memory/...), creating persistent artifacts. No third-party downloads or external installers are used.
Credentials
SKILL.md explicitly requires TOOLROUTER_API_KEY in the environment, but the registry metadata lists no required environment variables or primary credential — that's an inconsistency. Aside from the single API key, no unrelated credentials are requested. Still, the omission in the manifest means automated permission checks might not surface the fact that this skill expects a secret.
Persistence & Privilege
The skill does not request always:true or system-wide privileges. It does create and append to files in the agent's current workspace (memory/toolrouter-cache.jsonl and memory/toolrouter-usage.jsonl and possibly toolrouter-gateway-config.json). Those files can persist inputs and usage logs locally; if the skill were extended to call external endpoints, those logs could be sensitive.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install toolrouter-gateway - 安装完成后，直接呼叫该 Skill 的名称或使用
/toolrouter-gateway触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release — unified access to 150+ tools with caching and usage tracking
元数据
常见问题
ToolRouter Gateway 是什么？
Unified access to 150+ tools via ToolRouter API. Dynamically exposes research, security scanning, video production, web extraction, and more as native OpenCl... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 123 次。
如何安装 ToolRouter Gateway？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install toolrouter-gateway」即可一键安装，无需额外配置。
ToolRouter Gateway 是免费的吗？
是的，ToolRouter Gateway 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
ToolRouter Gateway 支持哪些平台？
ToolRouter Gateway 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 ToolRouter Gateway？
由 NeroAgent（@neroagent）开发并维护，当前版本 v1.0.0。
推荐 Skills