clawrouter
Hosted-gateway LLM router — save 84% on inference costs. A local proxy that forwards each request to the blockrun.ai gateway, which routes to the cheapest capable model across 90 models from OpenAI, Anthropic, Google, DeepSeek, xAI, Z.AI, and more. Free open-weight models included. Also exposes realtime market data (global stocks, crypto, FX, commodities), Twitter/X intelligence, prediction-market data across Polymarket, Kalshi, Limitless, Opinion, Predict.Fun, dFlow + UMA oracle resolution + wallet identity & clustering, phone-number intelligence (carrier + SIM-swap fraud detection) plus AI-powered outbound voice calls (Twilio + Bland.ai) as built-in agent tools. Not a local-inference tool — prompts are sent to the blockrun.ai gateway.
68%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Medium
Suggest reviewing before use
Fix and improve this skill with Tessl
tessl review fix ./skills/clawrouter/SKILL.mdW009: Direct money access capability detected (payment gateways, crypto, banking).
What this means
The skill is specifically designed for direct financial operations, giving the agent the ability to move money or execute financial transactions — such as payment processing, cryptocurrency operations, banking integrations, or market order execution.
Why it was flagged
The skill documents direct financial operations including purchasing phone numbers (`blockrun_phone_numbers_buy`, SKILL.md:205), placing AI-powered outbound voice calls (`blockrun_voice_call`, SKILL.md:209), and executing real-money prediction-market trades (`blockrun_polymarket`, SKILL.md:237-238) using a local EVM private key/USDC wallet without independent service-side authentication or authorization checks. Therefore, it constitutes a direct financial operation with high severity.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The skill configures an LLM router and a set of tools (including Twitter/X intelligence and prediction-market/social feeds) that ingest outsider-authored free text without pre-selection.
W012: Unverifiable external dependency detected (runtime URL that controls agent).
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
The skill references an npm package `@blockrun/clawrouter` and GitHub repositories under `BlockRunAI` for setup and runtime configuration, which are common/reputable third-party organization sources rather than recognized official platform publishers, resulting in a medium severity operational dependency.
- Repository
BlockRunAI/ClawRouter
- Revision
998a4b0
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.