安全扫描
OpenClaw
安全
high confidenceModelSense 的文件、运行指令和可选更新程序在内部与模型推荐顾问保持一致,不请求无关凭证或安装任意代码。
评估建议
["功能:此技能为顾问——推荐模型和努力级别, 可选在用户明确允许下切换会话。若不需自动切换或委托,拒绝 '应用' 提示。","GitHub Actions:仓库包含使用 OPENROUTER_API_KEY (GitHub 秘密) 的 CI 工作流,用于自动更新定价/上下文。提供该秘密将允许操作联系 openrouter.ai 并提交更新的数据/models.yaml。如果不需要外部更新,请禁用该 CI 秘密或禁用工作流。","提供者访问:技能将尝试读取用户配置的提供者(建议运行 `openclaw models list`)。确保代理运行时具有预期的最小权限。","审查数据文件:基准和模型目录是手动编写的;如果您依赖其确切排名/成本用于计费或路由,请定期验证准确性。","若需要更高的保证:请询问维护者关于技能的来源(源/主页)并在启用自动更新之前验证 GitHub Actions 秘密使用和提交历史。"]...详细分析 ▾
✓ 用途与能力
Name/description match the included assets: SKILL.md describes recommendation logic and the repo contains benchmark and model catalogs plus a small updater script to refresh pricing/context from OpenRouter. All requested capabilities (checking local providers, recommending models, optionally switching sessions) are consistent with the stated purpose.
ℹ 指令范围
SKILL.md instructs the agent to check the user's available providers (suggests running `openclaw models list` via exec or reading from context) and to optionally call session_status/sessions_spawn to switch or delegate. These actions are coherent with recommending and applying models but do require the agent environment to expose provider info and permit session switching; they can access provider metadata (not declared secrets) and act autonomously if allowed.
✓ 安装机制
There is no install spec for the agent runtime (instruction-only), which is low-risk. The repository includes a GitHub Actions workflow that installs Python deps (requests, pyyaml) in CI to run scripts/update-models.py; this is a standard, limited CI update pattern and not an agent-time install of arbitrary binaries.
ℹ 凭证需求
The skill declares no required env vars for runtime. The updater script and GitHub Action optionally use OPENROUTER_API_KEY (provided via GitHub Secrets) to fetch pricing/context data — this is reasonable for auto-updating but is an external credential unrelated to runtime recommendations. No other credentials or secrets are requested.
✓ 持久化与权限
always:false and disable-model-invocation:false (normal). The repo's CI may commit updated data/models.yaml within the skill repo, which is expected for keeping catalogs fresh. The skill does not modify other skills or system-wide settings.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.02026/3/7
["发布 ModelSense:一种按需顾问,推荐任何用户任务的最佳 LLM 模型和努力级别。","提供基于基准数据、任务分析和可用提供者的明确推荐。","提供理由、成本估算和不同努力或质量需求的替代选项。","支持咨询模式、自动切换会话模型和按需任务委托。","设计用于交互式使用,当用户需要帮助选择模型或理解基准影响时。"]
● 无害
安装命令 点击复制
官方npx clawhub@latest install modelsense
镜像加速npx clawhub@latest install modelsense --registry https://cn.clawhub-mirror.com
技能文档
ModelSense 技能文档(中文)
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制