Oathe Security Badge

Is BlockRunAI/ClawRouter safe?

Yes. BlockRunAI/ClawRouter is safe to install. Oathe's behavioral security audit gave the ClawRouter skill by BlockRunAI a trust score of 94/100 with 2 findings, none critical or high. Report updated

https://github.com/BlockRunAI/ClawRouter

94
SAFE

Is BlockRunAI/ClawRouter safe to install?

ClawRouter is a legitimate LLM routing plugin that optimizes inference costs by directing requests to appropriate models. The skill operates as a local proxy, implements x402 micropayments using local wallet key signing, and connects to blockrun.ai for payment settlement. No malicious behaviors detected - all network/file accesses are documented operational requirements.

What security issues were found in BlockRunAI/ClawRouter?

Category Scores

Prompt Injection 95/100 · 30%
Data Exfiltration 90/100 · 25%
Code Execution 95/100 · 20%
Clone Behavior 95/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 90/100 · 5%

Findings (2)

INFO Wallet key access for payment signing 0 ▶

The skill reads BLOCKRUN_WALLET_KEY from the environment to sign EIP-712 payment transactions for the x402 micropayment protocol. This is required and documented behavior - the private key is used locally for cryptographic signing and never leaves the machine.

INFO Network calls to BlockRun API 0 ▶

The skill makes network requests to blockrun.ai for routing decisions and payment settlement. This is the intended operational behavior documented in the architecture.

Should I install BlockRunAI/ClawRouter?

Oathe's verdict for BlockRunAI/ClawRouter is SAFE with a trust score of 94/100. Recommendation: Install.