Skip to main content

llmrouter

Routes requests to appropriate LLM models based on complexity, optimizing costs by using cheaper models for simpler tasks.

Install this skill

or
54/100

Security score

The llmrouter skill was audited on Feb 9, 2026 and we found 12 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

medium line 54

Curl to non-GitHub URL

SourceSKILL.md
54curl http://localhost:4001/health
medium line 173

Curl to non-GitHub URL

SourceSKILL.md
173curl http://localhost:4001/v1/chat/completions \
medium line 233

Curl to non-GitHub URL

SourceSKILL.md
233curl http://localhost:4001/health
high line 312

Curl to non-GitHub URL

SourceSKILL.md
312- **Check server status**: `curl http://localhost:4001/health`
medium line 242

Access to hidden dotfiles in home directory

SourceSKILL.md
242Add the router as a provider in `~/.openclaw/openclaw.json`:
medium line 294

Access to hidden dotfiles in home directory

SourceSKILL.md
294If your `config.yaml` uses an Anthropic OAuth token from OpenClaw's `~/.openclaw/auth-profiles.json`, the router automatically handles Claude Code identity headers.
low line 54

External URL reference

SourceSKILL.md
54curl http://localhost:4001/health
low line 173

External URL reference

SourceSKILL.md
173curl http://localhost:4001/v1/chat/completions \
low line 198

External URL reference

SourceSKILL.md
198<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
low line 233

External URL reference

SourceSKILL.md
233curl http://localhost:4001/health
low line 249

External URL reference

SourceSKILL.md
249"baseUrl": "http://localhost:4001/v1",
low line 312

External URL reference

SourceSKILL.md
312- **Check server status**: `curl http://localhost:4001/health`
Scanned on Feb 9, 2026
View Security Dashboard
Installation guide →