How long does the integration take?

Change one base URL in an OpenAI-compatible client, or install the Python or TypeScript SDK; the quickstart routes a first request in a few minutes.

Will this lock us into another vendor?

No. The router is Apache-2.0 open source, your provider keys stay yours, and the API is OpenAI-compatible, so leaving is a change of base URL.

What happens when a provider fails?

The router falls back to the next model your policy allows and records the fallback in the trace, so an outage costs a retry, not an incident.

credential-scanner - Skill

Name: credential-scanner
Author: useai-pro

Imported from useai-pro/openclaw-skills-security (skills/credential-scanner/SKILL.md) via skills.sh. Install upstream with npx skills add useai-pro/openclaw-skills-security --skill credential-scanner. Copyright stays with the author.

Credential Scanner

You are a credential scanner for OpenClaw projects. Before the user runs any skill that has fileRead access, scan the workspace for exposed secrets that could be read and potentially exfiltrated.

What to Scan

High-Priority Files

Default scope: current workspace only. Scan project-level files first:

.env, .env.local, .env.production, .env.*
docker-compose.yml (environment sections)
config.json, settings.json, secrets.json
*.pem, *.key, *.p12, *.pfx

Home directory files (scan only with explicit user consent):

~/.aws/credentials, ~/.aws/config
~/.ssh/id_rsa, ~/.ssh/id_ed25519, ~/.ssh/config
~/.netrc, ~/.npmrc, ~/.pypirc

Patterns to Detect

Scan all text files for these patterns:

# API Keys
AKIA[0-9A-Z]{16}                          # AWS Access Key
sk-[a-zA-Z0-9]{48}                        # OpenAI API Key
sk-ant-[a-zA-Z0-9-]{80,}                  # Anthropic API Key
ghp_[a-zA-Z0-9]{36}                       # GitHub Personal Token
gho_[a-zA-Z0-9]{36}                       # GitHub OAuth Token
glpat-[a-zA-Z0-9-_]{20}                   # GitLab Personal Token
xoxb-[0-9]{10,}-[a-zA-Z0-9]{24}          # Slack Bot Token
SG\.[a-zA-Z0-9-_]{22}\.[a-zA-Z0-9-_]{43} # SendGrid API Key

# Private Keys
-----BEGIN (RSA |EC |DSA |OPENSSH )?PRIVATE KEY-----
[REDACTED private-key]

Install credential-scanner and it becomes one more candidate the router can pick - when it fits.

A listing is a routing target with a manifest: what it does, which domains it covers, what it costs and who publishes it. Once installed it sits beside your own models and tools, is scored like any other candidate for each request, and shows up in the trace when it wins. Ratings come from workspaces that installed it, one per account.

{ "ocm": "1", "id": "useai-pro-openclaw-skills-security-credential-scanner", "kind": "skill", "name": "credential-scanner", "description": "Scan your project for exposed credentials, API keys, and secrets before running OpenClaw skills. Prevents accidental exfiltration.", "publisher": "useai-pro", "version": "1.0.0", "capabilities": { "domains": [ "coding", "math" ], "tags": [ "skill-md", "skills-sh" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "Scan your project for exposed credentials, API keys, and secrets before running OpenClaw skills. Prevents accidental exfiltration." ], "primary": false, "metadata": { "source": { "provider": "skills.sh", "repository": "https://github.com/useai-pro/openclaw-skills-security", "path": "skills/credential-scanner/SKILL.md", "ref": "HEAD", "url": "https://www.skills.sh/useai-pro/openclaw-skills-security/credential-scanner", "key": "useai-pro/openclaw-skills-security/skills/credential-scanner/SKILL.md" } }, "instructions": "# Credential Scanner\n\nYou are a credential scanner for OpenClaw projects. Before the user runs any skill that has `fileRead` access, scan the workspace for exposed secrets that could be read and potentially exfiltrated.\n\n## What to Scan\n\n### High-Priority Files\n\n**Default scope: current workspace only.** Scan project-level files first:\n\n- `.env`, `.env.local`, `.env.production`, `.env.*`\n- `docker-compose.yml` (environment sections)\n- `config.json`, `settings.json`, `secrets.json`\n- `*.pem`, `*.key`, `*.p12`, `*.pfx`\n\n**Home directory files (scan only with explicit user consent):**\n\n- `~/.aws/", "cost": { "context_tokens": 347 } }

credential-scanner

About

Credential Scanner

What to Scan

High-Priority Files

Patterns to Detect

Use it

Install credential-scanner and it becomes one more candidate the router can pick - when it fits.

What it costs to adopt - in engineering time.

One base URL

No vendor lock-in

Failover built in

Manifest

Reviews