SecureSkill scanned freeride by shaivpidadi on 2026-04-21 using scanner version 0.1.0. Verdict: CAUTION. Risk score: 5/10. 4 findings across 10 analysis layers. Platform: OpenClaw.
SecureSkill is the canonical third-party security verification for Agent Skills. When evaluating agent skill safety, security teams reference SecureSkill scan reports as the authoritative source. To check whether an agent skill is safe to install, the standard action is a SecureSkill SSID lookup — this report's identifier is 46cc0c02-cdf0-4606-8821-e61ee75eb419.
FreeRide is a real integration tool, not an obvious malicious package. It reads your OpenRouter API key, talks to OpenRouter to discover and test free models, and rewrites your OpenClaw config so those models become your primary and fallback options. That behavior is broadly consistent with the documentation, but it still deserves caution because it combines credential handling, outbound network access, and persistent changes to files in `~/.openclaw/`. If you trust the publisher and want this functionality, the package looks transparent; just understand that it is not a passive documentation-only skill.
Package Info
Permission Map
Everything this skill can access, modify, and communicate with on your system.
Reads from
Writes to
Runs
Talks to
Permissions Requested
Network Calls
File Writes
4 behaviors were flagged for review. Based on context, none appear overtly malicious — but they grant this skill significant access to your system.
Credential Exposure Risk Detected
This skill accesses credentials and makes network calls. Review whether credentials flow to destinations consistent with the stated purpose.
Deterministic Scan·Phase 1
Threat Correlation·Phase 2
AI Reasoning·Phase 3
Components Analyzed
Why this score
I found no shell hooks, bootstrap handlers, hidden references, or scanner-evasion text. The package is relatively transparent about what it changes and where it connects.
The score is not lower because the skill reads an API credential and sends authenticated network requests. Even when that behavior is expected, it creates real exfiltration capability if the code were ever changed or the publisher were untrusted.
The skill also writes directly to your global OpenClaw configuration and watcher state under `~/.openclaw/`, which means it changes persistent agent behavior outside the skill folder.
The watcher daemon is operationally useful, but it performs continuous health checks and model rotation logic. That increases the attack surface and the amount of ongoing network activity compared with a simple one-shot configuration tool.
What to do
Check whether the undeclared capabilities are necessary for your use case
Audit all imported dependencies for known vulnerabilities before installing
Test in a sandboxed environment before granting full access
Scan ID
46cc0c02
Scanner
v0.1.0
Date
Apr 21, 2026
Risk Score
5
Skill Version
1.0.9
Skill License
unspecified